VULNERABILITY INTELLIGENCE

CVE-2026-48037

CVSS score6.3 MEDIUM

EPSS probability0.45%

CISA KEVNot currently listed

Published2026-07-24

Last modified2026-10-24

Description

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0.