Amazon WorkSpaces Linux Vulnerability Allows Credential Theft

Amazon WorkSpaces Linux Vulnerability Allows Credential Theft

First seen 8 Nov 2025, 12:36 UTC Thecyberexpress 43.6

Article Content

Browse articles
ThreatCluster

A security flaw in the Amazon WorkSpaces client for Linux enables attackers to extract valid authentication tokens, allowing unauthorized access to corporate environments. Identified as CVE-2025-12779, this vulnerability affects organizations using AWS's virtual desktop infrastructure. AWS issued a security bulletin on November 5, 2025, urging immediate remediation.