High severity · published Aug 31, 2026
CVE-2026-82862
Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files
8.4
CVSS
0.2%
EPSS
No
On KEV
Description
Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HU
hulumi · kerberosmansour
before 1.3.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82862
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82862
github.com
https://github.com/kerberosmansour/hulumi/security/advisories/GHSA-mjcg-x5mr-27ww
www.vulncheck.com
https://www.vulncheck.com/advisories/hulumi-before-1.3.2-helper-script-shadowing-via-workspace-files
More from hulumi
9.8
CVE-2026-82859
hulumi before v1.3.2 SCP Template Tag-on-Create Bypass
9.8
CVE-2026-82857
hulumi before v1.3.2 Privilege Escalation via IAM Policy
8.5
CVE-2026-48034
HULUMI-H5 bypass via decoy sibling resources targeting a different bucket
8.4
CVE-2026-48036
Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts
8.4
CVE-2026-48033
Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name