amazon-connect-salesforce-lambda vulnerabilities

CVEs whose affected-version data names the amazon-connect-salesforce-lambda package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-94384High· 8.1

2d ago

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM…

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM…

▾ TwilightAmazon · amazon-connect-salesforce-lambdavia NVD