CVE-2026-12957

This vulnerability is like a “workspace gets to run programs” trick. If someone sends you a fake project and you open it, the extension may automatically execute commands from that project’s files—after you trust the workspace when asked.

In real terms, it means a malicious project could potentially make your computer perform actions the attacker wants.

This matters if you use Language Servers for AWS in your editor/IDE and you open workspaces/projects that you didn’t create or that came from an untrusted source. The risk is tied to user behavior: you must open a malicious workspace and then trust it when prompted.

If your development machines never open untrusted workspaces (or you are very strict about what you trust), the exposure is much lower.

This is an AMBER issue because it can lead to arbitrary command execution, meaning a malicious project could take over your developer machine. However, there’s no confirmed reporting in the provided materials of attacks happening in the wild, and the exploit depends on you opening and trusting a malicious workspace.

Patch to 1.65.0+ promptly, especially on machines used to open external or customer-provided projects.