CVE-2025-12815

MEDIUM5.3

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025

Published Nov 6, 2025

Modified 5 months ago

Details

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots.

To mitigate this issue, users should upgrade to version 2025.09 or above.

References

ADVISORY

https://aws.amazon.com/security/security-bulletins/AWS-2025-026/

FIX

https://github.com/aws/res/releases/tag/2025.09

ADVISORY

https://github.com/aws/res/security/advisories/GHSA-x3cx-g8g9-75hv

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-12815

CVSS Analysis

CVSS v4.0