UNKNOWNCVSS not yet scoredVulnerability
CVE-2025-65200
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-22T22:14:18.200859+00:00
- Cve id
- CVE-2025-65200
- First seen by Signal
- 2026-10-22T22:12:23+00:00
- Retrieved at
- 2026-10-22T22:16:40+00:00
- Published at
- 2026-10-22T19:17:32.260
- Last modified
- 2026-10-22T19:17:32.260
Explore deeper with Ninja Signal's threat intelligence graph