Which versions of AWS CDK are affected by CVE-2026-13760?

AWS CDK (aws-cdk-lib) versions before 2.260.0 contain an OS command injection vulnerability in the Docker bundling pipeline that allows arbitrary command execution during CDK deployments through…. A patch is available.

How to fix or mitigate CVE-2026-13760?

Within 24 hours: Identify all projects using aws-cdk-lib and document current versions. Within 7 days: Upgrade aws-cdk-lib to v2.260.0 or later across all projects and validate deployments post-upgrade. Within 30 days: Audit package.json files for suspicious dependency version specifications and implement mandatory code review controls for dependency modifications.

AWS CDK CVE-2026-13760

Q: What is the CVSS score of CVE-2026-13760?

CVE-2026-13760 has a CVSS 4.0 base score of 7.0 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.6%.

EUVD-2026-41125 HIGH

OS Command Injection (CWE-78)

2026-07-01 AMZN

GHSA-vcrf-j523-4mrf

Docker Command Injection AWS Aws Cdk

7.0

CVSS 4.0 · Vendor: AMZN

Severity by source

Vendor (AMZN) PRIMARY

7.0 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.3 HIGH

Local build-time path (AV:L) needing control of package.json content (PR:L) and an operator running bundling (UI:R); yields full host code execution (C/I/A:H).

3.1 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (AMZN).

CVSS VectorVendor: AMZN

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 19:33 vuln.today

CVSS changed

Jul 01, 2026 - 19:22 NVD

7.3 (HIGH) 7.0 (HIGH)

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on aws-cdk-lib (4 direct, 1 indirect)

Ecosystem-wide dependent count for version 2.260.0.

DescriptionCVE.org

OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in AWS aws-cdk-lib on all platforms might allow a actor who controls dependency version strings in a project's package.json file to execute arbitrary commands on the host running the CDK toolchain via injected shell metacharacters in the OsCommand helper. This issue requires the actor to control the content of a package.json dependency version string that is processed during Docker-based bundling with nodeModules specified.

To remediate this issue, users should upgrade to v2.260.0.

Articles & Coverage 1

News 4 New Docker Vulnerabilities - 4 High Severity, 2 With POC Jul 02, 2026

AnalysisAI

OS command injection in AWS aws-cdk-lib lets an actor who controls a dependency version string in a project's package.json run arbitrary commands on the host executing the CDK toolchain. The flaw lives in the OsCommand helper of the NodejsFunction Docker bundling pipeline, which passes unsanitized version strings into a shell during nodeModules installation. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; AWS has released a fixed version (v2.260.0).

Technical ContextAI

AWS CDK (Cloud Development Kit) is an infrastructure-as-code framework; the affected aws-cdk-lib construct library includes the NodejsFunction construct, which can bundle Lambda function dependencies inside a Docker container. During Docker-based bundling with nodeModules specified, the toolchain builds shell commands to install the named dependencies at their declared versions. The internal OsCommand helper composes these commands but fails to neutralize shell metacharacters (CWE-78, OS Command Injection) present in the dependency version strings drawn from package.json, so attacker-controlled version text is interpreted by the shell rather than treated as literal data. The affected component is identified by CPE cpe:2.3:a:aws:aws_cdk:*:*:*:*:*:*:*:* across all platforms.

RemediationAI

Vendor-released patch: v2.260.0 - upgrade aws-cdk-lib to 2.260.0 or later (release notes at https://github.com/aws/aws-cdk/releases/tag/v2.260.0; advisories at https://aws.amazon.com/security/security-bulletins/2026-050-aws/ and https://github.com/aws/aws-cdk/security/advisories/GHSA-vcrf-j523-4mrf). Until you can upgrade, reduce exposure by avoiding Docker-based bundling with nodeModules for NodejsFunction (for example by using local esbuild bundling or pre-built assets), which removes the vulnerable OsCommand path but changes how dependencies are packaged; additionally validate or pin dependency version strings in package.json and treat any package.json originating from untrusted contributors or third-party dependencies as untrusted input, and run CDK synth/bundling in isolated, least-privilege CI runners so a successful injection cannot reach long-lived credentials.