{"uuid": "be0a6dde-7319-4533-8790-53c229004879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4318", "type": "seen", "source": "https://gist.github.com/alon710/2558fd727c5d711082968032190a8577", "content": "# CVE-2025-4318: CVE-2025-4318: Remote Code Execution in AWS Amplify codegen-ui\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2025-4318\n\n## Summary\nA critical remote code execution (RCE) vulnerability exists in AWS Amplify Studio's code-generation library (@aws-amplify/codegen-ui). An authenticated attacker with permissions to create or modify component schemas can inject malicious JavaScript code into those schemas. When the Amplify CLI or the build environment processes these schemas, the unvalidated expressions are executed within the host Node.js environment, leading to full system compromise.\n\n## TL;DR\nRemote code execution vulnerability in @aws-amplify/codegen-ui allows authenticated users to execute arbitrary commands during build/generation phases via crafted component schemas.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-95\n- **Attack Vector**: Network\n- **Privileges Required**: Low\n- **User Interaction**: None\n- **Impact**: High (Confidentiality, Integrity, Availability)\n- **Exploit Status**: PoC available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- AWS Amplify Studio UI Builder\n- @aws-amplify/codegen-ui\n- @aws-amplify/codegen-ui-react\n- **@aws-amplify/codegen-ui**: >= 0.1.0, < 2.20.4 (Fixed in: `2.20.4`)\n- **@aws-amplify/codegen-ui-react**: >= 0.1.0, < 2.20.4 (Fixed in: `2.20.4`)\n\n## Mitigation\n\n- Upgrade @aws-amplify/codegen-ui to version 2.20.4 or above\n- Upgrade @aws-amplify/codegen-ui-react to version 2.20.4 or above\n- Restrict user permissions in AWS Amplify Studio to trusted personnel\n- Network-isolate the build pipelines and developer environments to prevent outbound data exfiltration\n\n**Remediation Steps:**\n1. Run 'npm list @aws-amplify/codegen-ui' to identify the active version.\n2. Execute 'npm install @aws-amplify/codegen-ui@latest @aws-amplify/codegen-ui-react@latest' in all project directories.\n3. Re-generate package lockfiles and commit updates to source control.\n4. Verify global tools with 'npm install -g @aws-amplify/cli@latest'.\n\n## References\n\n- [AWS Security Advisory AWS-2025-010](https://aws.amazon.com/security/security-bulletins/AWS-2025-010/)\n- [GitHub Security Advisory GHSA-hf3j-86p7-mfw8](https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-hf3j-86p7-mfw8)\n- [SecureLayer7 Technical Vulnerability Analysis](https://blog.securelayer7.net/cve-2025-4318-aws-amplify-rce/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-4318) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T21:31:48.139809Z"}