VULNERABILITY INTELLIGENCE

CVE-2026-48033

EPSS probability0.48%
CISA KEVNot currently listed
Published2026-07-24
Last modified2026-10-24

Description

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can be bypassed by a forged Pulumi-URN logical name. This issue has been patched in version 1.4.0.

Weakness classification

  • security-advisories@github.com: CWE-693

Primary references