CVE-2025-65200

Published Oct 22, 2026

Last updated 2 days ago

Overview

Description
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.
Source
cve@mitre.org
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending

  1. @CVEnew CVE-2025-65200 and CVE-2025-69723 please publish https://t.co/trgGjyFllE - I have been waiting for ages after @localstack ghosted me.

    @Jr8wyd

    22 Oct 2026

    9 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.