Mocknest Serverless
Monthly
Improper privilege management in mocknest-serverless 0.9.0 exposes AWS IAM role assumption to unauthorized escalation through a hardcoded default OIDC role name in GitHub Actions workflow dispatch inputs. The affected GitHub Actions workflows defaulted to a predictable IAM role name ('GitHubOIDCAdmin') combined with an overly permissive OIDC trust policy using wildcard StringLike conditions and PowerUserAccess grants, allowing any user with repository dispatch access to assume an admin-level AWS IAM role beyond their intended scope. No public exploit code has been identified and the project is not listed in CISA KEV; the upstream fix is available as commit 6ab3147 and PR #254.
Improper privilege management in mocknest-serverless 0.9.0 exposes AWS IAM role assumption to unauthorized escalation through a hardcoded default OIDC role name in GitHub Actions workflow dispatch inputs. The affected GitHub Actions workflows defaulted to a predictable IAM role name ('GitHubOIDCAdmin') combined with an overly permissive OIDC trust policy using wildcard StringLike conditions and PowerUserAccess grants, allowing any user with repository dispatch access to assume an admin-level AWS IAM role beyond their intended scope. No public exploit code has been identified and the project is not listed in CISA KEV; the upstream fix is available as commit 6ab3147 and PR #254.