Amazon Confirms WorkSpaces Linux Client Authentication Issue

Amazon Confirms WorkSpaces Linux Client Authentication Issue

Amazon has released a cloud security update after it confirmed a high-severity vulnerability that could expose Linux WorkSpaces authentication tokens.

Amazon WorkSpaces Linux Flaw Exposes User Tokens

A newly disclosed security flaw in Amazon WorkSpaces client for Linux could allow attackers to extract valid authentication tokens and gain unauthorized access to corporate environments. The vulnerability poses a serious risk to organizations relying on Amazon’s desktop-as-a-service platform for remote operations. In its advisory, Amazon AWS stated “Under certain circumstances, an unintended user may be able to extract a valid authentication tok…

Techrights — Slopwatch: Brian Fagioli Targets "Linux" With LLMs, Google News Helps Blame "Linux" for Amazon WorkSpaces Flaws

Tonight's slopfest

CVE-2025-12779: Amazon WorkSpaces Linux Vulnerability

A newly disclosed security flaw in the Amazon WorkSpaces client for Linux has raised serious concerns across organizations relying on AWS virtual desktop infrastructure. The vulnerability, identified as CVE-2025-12779, enables local attackers to extract valid authentication tokens and gain unauthorized access to other users’ WorkSpace sessions.  On November 5, 2025, AWS issued a formal security bulletin, AWS-2025-025, detailing the issue and urg…

Amazon WorkSpaces For Linux Vulnerability Let Attackers Extract Valid Authentication Token - Cybernoz - Cybersecurity News

Amazon has disclosed a significant security vulnerability in its WorkSpaces client for Linux that could allow unauthorized users to extract valid authentication tokens and gain unauthorized access to other users’ WorkSpaces. The vulnerability, tracked as CVE-2025-12779, affects multiple client versions and poses a direct threat to organizations relying on Amazon’s desktop-as-a-service platform for remote work infrastructure. The improper handlin…

Amazon WorkSpaces for Linux Vulnerability Exposes Valid Auth Tokens to Attackers

A recently disclosed vulnerability in the Amazon WorkSpaces client for Linux exposes a critical security flaw that could allow attackers to gain unauthorized access to user environments due to improper handling of authentication tokens. The issue, tracked as CVE-2025-12779, has prompted urgent action from Amazon Web Services (AWS) and serves as an essential reminder for […] The post Amazon WorkSpaces for Linux Vulnerability Exposes Valid Auth To…