Which versions of AWS Amplify are affected by EUVD-2025-13500?

AWS Amplify Studio's amplify-codegen-ui package contains a critical code injection vulnerability (publicly available exploit code exists) that allows authenticated developers to execute arbitrary…. A patch is available.

Is there a public PoC exploit available for EUVD-2025-13500?

Yes, a public proof-of-concept exploit is available for EUVD-2025-13500. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate EUVD-2025-13500?

Within 24 hours: identify all projects using AWS Amplify Studio and determine current amplify-codegen-ui versions by reviewing package manifests and build configurations. Within 7 days: upgrade amplify-codegen-ui to v2.20.3 or newer across all affected projects, conduct regression testing in staging environments, and restrict UI component creation and modification permissions to verified developers only. Within 30 days: complete production migration to the patched version, audit generated code for evidence of malicious injection from potentially vulnerable build runs, and establish mandatory code review requirements for all component modifications.

AWS Amplify EUVD-2025-13500

Q: What is the CVSS score of EUVD-2025-13500?

EUVD-2025-13500 has a CVSS 4.0 base score of 9.0 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

| CVE-2025-4318 CRITICAL

Eval Injection (CWE-95)

2025-05-05 ff89ba41-3aa1-4d27-914a-91399e9639e5

GHSA-hf3j-86p7-mfw8

RCE Code Injection

9.0

CVSS 4.0 · Vendor: ff89ba41-3aa1-4d27-914a-91399e9639e5

Severity by source

Vendor (ff89ba41-3aa1-4d27-914a-91399e9639e5) PRIMARY

9.0 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.5 HIGH

Network-reachable but requires authenticated component-author privileges (PR:L) and a build/codegen step to trigger (AC:H); code escapes the component into the build host (S:C) with full C/I/A impact.

3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (ff89ba41-3aa1-4d27-914a-91399e9639e5).

CVSS VectorVendor: ff89ba41-3aa1-4d27-914a-91399e9639e5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 30, 2026 - 22:20 EUVD

Source Code Evidence Fetched

Jul 29, 2026 - 16:28 vuln.today

Analysis Updated

Jul 29, 2026 - 16:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 29, 2026 - 16:22 vuln.today

cvss_changed

CVSS changed

Jul 29, 2026 - 16:22 NVD

9.5 (CRITICAL) 9.0 (CRITICAL)

Analysis Generated

Mar 28, 2026 - 18:40 vuln.today

CVE Published

May 05, 2025 - 19:15 nvd

CRITICAL 9.5

DescriptionCVE.org

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process.

AnalysisAI

Arbitrary JavaScript code execution in AWS Amplify Studio's amplify-codegen-ui package (fixed in v2.20.3) allows an authenticated user with permission to create or modify UI components to inject malicious code via unvalidated component property/binding expressions, which is then evaluated during the React component code-generation, rendering, and build process. Because the injected code runs inside the developer's build pipeline, an attacker can compromise the build environment and any generated application. This corresponds to a CWE-95 eval-injection flaw; publicly available exploit code exists (a SecureLayer7 technical write-up), but there is no public exploit identified as weaponized and it is not listed in CISA KEV, with a low EPSS score of 0.24%.

Technical ContextAI

AWS Amplify Studio is a visual development environment that lets users design UI components and then uses the aws-amplify/amplify-codegen-ui package (specifically the codegen-ui-react module) to transform those component definitions into React/JSX source code. Component 'property expressions' (binding expressions attached to UI element properties) were passed into the code-generation pipeline without input validation or sanitization. Since these expressions are ultimately emitted into generated JavaScript and evaluated during rendering and build, an attacker-controlled expression is treated as executable code rather than inert data - the classic CWE-95 (Improper Neutralization of Directives in Dynamically Evaluated Code, i.e., 'Eval Injection') pattern. The v2.20.3 release confirms the root cause by adding sanitization to binding expressions (PR #1174, commit ca98c38).

RemediationAI

Vendor-released patch: v2.20.3 - upgrade the aws-amplify/amplify-codegen-ui dependency (and regenerate components) to 2.20.3 or later, which adds sanitization to binding expressions (commit ca98c38, PR #1174); consult the AWS bulletin AWS-2025-010 (https://aws.amazon.com/security/security-bulletins/AWS-2025-010/) and advisory GHSA-hf3j-86p7-mfw8 (https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-hf3j-86p7-mfw8). If immediate upgrade is not possible, reduce exposure by tightly restricting who can create or modify Amplify Studio UI components - limit component authoring/IAM permissions to a small set of trusted developers, since the vulnerability requires that privilege - and review existing component property/binding expressions for suspicious code before running codegen or builds; the trade-off is reduced developer self-service and manual review overhead. Running codegen and build steps in isolated, least-privilege CI containers limits blast radius if a malicious expression executes, but does not close the vulnerability itself.