CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path in a world-writable temporary directory, which the installation step reads after elevating its own privileges.
To remediate this issue, users should upgrade to version 2.3.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
aws-fpgato a version that resolves this vulnerability.Fixed in 2.3.4
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using the FPGA management tool installation component in AWS FPGA Development Kit versions before 2.3.4 are exposed. Exploitation requires a local user on the affected system.
What does an attacker need to exploit it?
A local user with the ability to place crafted shell content at a predictable path in the world-writable temporary directory can exploit the issue. The vulnerable installation step then reads that content after elevating its privileges.
What is the impact of successful exploitation?
Successful exploitation may allow the local attacker to execute arbitrary code with root privileges, affecting confidentiality, integrity, and availability.
How can this be remediated?
Upgrade AWS FPGA Development Kit to version 2.3.4.