CVE-2026-82863: @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
@hulumi/baselineto a version that resolves this vulnerability.Fixed in 1.3.2
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of the npm package @hulumi/baseline running a version earlier than 1.3.2 are affected. Exposure is relevant where the package is relied on to detect CloudTrail event selector changes.
What access does an attacker need?
The supplied CVSS vector indicates an attacker needs local access and low privileges, with no user interaction required. The described impact depends on the attacker being able to modify CloudTrail event selectors.
What is the practical impact?
CloudTrail selector tampering may not be fully detected, reducing coverage for audit logging configuration changes. This can allow selector modifications to evade the monitoring provided by the affected package.
How can I remediate the issue?
Upgrade @hulumi/baseline to version 1.3.2 or later. The issue affects versions before 1.3.2.