What is CVE-2026-85028?

CVE-2026-85028 is a high-severity vulnerability, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 7.8/10. Published 2026-09-03.

How severe is CVE-2026-85028?

High severity. CVSS v3 base score is 7.8 out of 10.

CVE-2026-85028

CVE-2026-85028

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path in a world-writable temporary directory, which the installation step reads after elevating its own privileges. To remediate this issue, users should upgrade to version 2.3.4.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Weakness classification (CWE)

CWE-379 — Creation of Temporary File in Directory with Insecure Permissions

References

Frequently asked questions

What is CVE-2026-85028?: CVE-2026-85028 is a high-severity vulnerability, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 7.8/10. Published 2026-09-03.
How severe is CVE-2026-85028?: High severity. CVSS v3 base score is 7.8 out of 10.