CVE-2026-82859
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Aug 31, 2026
Vendor
unknown
Description
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary restrictions by exploiting the weakened SCP template in downstream deployments.