VULNERABILITY INTELLIGENCE

CVE-2026-48034

EPSS probability0.45%
CISA KEVNot currently listed
Published2026-07-24
Last modified2026-10-24

Description

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, there is a bypass via decoy sibling resources targeting a different bucket. This issue has been patched in version 1.4.0.

Weakness classification

  • security-advisories@github.com: CWE-284

Primary references