CVE-2026-85028

The record

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path in a world-writable temporary directory, which the installation step reads after elevating its own privileges. To remediate this issue, users should upgrade to version 2.3.4.

Affected packages

Related vulnerabilities

• CVE-2026-82346 A potential security vulnerability has been identified in the HP ImageDiags for versions… CWE-379
• CVE-2026-50544 NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. CWE-379
• CVE-2026-46388 osquery is a SQL powered operating system instrumentation, monitoring, and analytics… CWE-379
• CVE-2026-7539 A potential security vulnerability has been identified in the HP Accessory WMI Provider… CWE-379
• CVE-2026-54328 Pi is a minimal terminal coding harness. CWE-379
• GHSA-jfgx-wxx8-mp94 Pi Agent: Predictable temporary extension install paths allow local privilege escalation… CWE-379
• CVE-2026-42191 OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol)… CWE-379
• CVE-2019-25677 WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to… CWE-379