Which versions of AWS Amplify Codegen-UI are affected by EUVD-2026-51268?

Amazon's @aws-amplify/codegen-ui-react before version 2.20.6 contains a critical code injection vulnerability allowing authenticated Amplify Studio users to inject malicious code that executes across…. A patch is available.

How to fix or mitigate EUVD-2026-51268?

Within 24 hours, inventory all applications and development environments using @aws-amplify/codegen-ui-react and identify current versions in use. Within 7 days, upgrade all instances to v2.20.6 or later across development, testing, and production environments, including those integrated in CI/CD pipelines. Within 30 days, audit generated components created prior to the patch for signs of compromise, review Amplify Studio access logs for suspicious schema modifications, and implement stricter access controls and approval workflows for component generation.

AWS Amplify Codegen-UI EUVD-2026-51268

Q: What is the CVSS score of EUVD-2026-51268?

EUVD-2026-51268 has a CVSS 4.0 base score of 6.4 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

| CVE-2026-18245 MEDIUM

Code Injection (CWE-94)

2026-07-30 AMZN

RCE AWS Code Injection Amplify Codegen Ui

6.4

CVSS 4.0 · Vendor: AMZN

Severity by source

Vendor (AMZN) PRIMARY

6.4 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.0 CRITICAL

Requires an authenticated Studio schema author (PR:L) and a victim build/render step (UI:R); injected code crosses into other execution environments (S:C) with full code-execution impact.

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (AMZN).

CVSS VectorVendor: AMZN

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Severity Changed

Jul 30, 2026 - 19:22 NVD

CRITICAL MEDIUM

CVSS changed

Jul 30, 2026 - 19:22 NVD

9.0 (CRITICAL) 6.4 (MEDIUM)

Source Code Evidence Fetched

Jul 30, 2026 - 18:51 vuln.today

Analysis Generated

Jul 30, 2026 - 18:51 vuln.today

CVE Published

Jul 30, 2026 - 18:13 cve.org

CRITICAL 9.0

DescriptionCVE.org

Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values due to insufficient coverage and effectiveness of the input validation introduced for CVE-2025-4318.

To remediate this issue, users should upgrade to version 2.20.6

AnalysisAI

Code injection in Amazon's @aws-amplify/codegen-ui-react before 2.20.6 lets a remote authenticated Amplify Studio user embed attacker-controlled code into generated React components by supplying crafted component or theme schema values (CWE-94). The malicious code executes wherever the generated artifacts run - end-user browsers, developer machines, CI/CD pipelines, and server-side rendering contexts - giving broad code-execution reach. This is a bypass of the input validation added for CVE-2025-4318, which proved insufficient in coverage and effectiveness; no public exploit has been identified at time of analysis, though a vendor patch (v2.20.6) is available.

Technical ContextAI

The affected component is @aws-amplify/codegen-ui-react, the React code generator that turns Amplify Studio visual designs (component definitions and theme schemas) into TypeScript/JSX source code. The root cause class is CWE-94 (Improper Control of Generation of Code), meaning untrusted schema field values are placed into emitted source without adequate sanitization or escaping, so a value can break out of its intended literal context and become executable code in the generated file. The v2.20.6 fix specifically emits non-identifier theme keys as string literals (commit 062c3a5, PR #1202), indicating that theme keys/values previously written as raw identifiers or object keys could be crafted to inject code. Because the generator output is consumed downstream - bundled into browser apps, run during builds, and executed under SSR - the injected code inherits the privileges of each of those execution environments. CPE cpe:2.3:a:aws:amplify_codegen_ui:*:*:*:*:*:*:*:* covers the affected package.

RemediationAI

Upgrade to @aws-amplify/codegen-ui-react version 2.20.6, the vendor-released patch that emits non-identifier theme keys as string literals to prevent injection (release: https://github.com/aws-amplify/amplify-codegen-ui/releases/tag/v2.20.6; advisory: https://aws.amazon.com/security/security-bulletins/2026-066-aws/ and https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-74xx-rjgf-m69j). Because the prior CVE-2025-4318 fix was incomplete, do not rely on any pre-2.20.6 build. Until the upgrade is deployed, restrict who can author or import Studio component and theme schemas to trusted developers, review generated code diffs before building or deploying (treat unexpected identifiers or executable-looking theme keys as suspect), and avoid running codegen or builds on untrusted schema input in privileged CI/CD or SSR contexts; the trade-off is added review friction and slower design-to-code turnaround, but it directly limits the code-execution path pending patching.