CVE-2025-12815: Medium severity Amazon Research and Engineering Studio vulnerability
An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots.
To mitigate this issue, users should upgrade to version 2025.09 or above.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Research and Engineering Studio (RES) on AWSto a version that resolves this vulnerability.Fixed in 2025.09
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12815?
CVE-2025-12815 is classified with a moderate severity level due to its potential impact on user privacy.
How do I fix CVE-2025-12815?
To mitigate CVE-2025-12815, users should upgrade to Amazon Research and Engineering Studio version 2025.09 or later.
What type of issue is CVE-2025-12815?
CVE-2025-12815 is an ownership verification issue that allows unauthorized access to other users' active desktop session metadata.
Who is affected by CVE-2025-12815?
CVE-2025-12815 affects users of Amazon Research and Engineering Studio prior to version 2025.09.
What kind of data can be exposed due to CVE-2025-12815?
CVE-2025-12815 may expose periodical desktop preview screenshots and other metadata from another user's active session.