Back to vendor advisories
AWS Security BulletinsCVE-2026-7791

CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

Severity not listed 1 CVE Published Oct 14, 2026 at 6:37 PM UTC

Summary

No separate summary was provided in the collected bulletin.

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

Bulletin ID: 2026-025-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 2026/05/04 15:30 PM PDT Description: Amazon Skylight Workspace Config Service ( slwsconfigservice) is a critical background service within Amazon WorkSpaces that manages system configuration, monitors health, and updates components.

CVEs in this advisory 1

Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

    • The vendor changed the advisory's last-updated date.
    • The vendor changed the advisory's last-updated date.
    • The vendor changed the advisory's last-updated date.
    • The vendor changed the advisory's last-updated date.
    • The vendor changed the advisory summary.
    • The vendor changed the advisory's last-updated date.
    • The vendor changed the advisory's last-updated date.

Updates

  1. Added to SecurityAlert

    We collected the advisory from the official source.

  2. Published by AWS

    The publication date reported by the vendor.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.