GCVE-110-CLOUD-2025-0026

Advisory Published

Vulnetix · Advisory published January 15, 2025

AWS identified two vulnerabilities in specific versions of native clients for Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon DCV. These issues could allow man-in-the-middle attacks, potentially giving attackers access to remote sessions. Affected versions include WorkSpaces clients 5.20.0 or earlier, AppStream 2.0 Windows client 1.1.1326 or earlier, and various DCV clients. AWS recommends upgrading to patched versions to address these security concerns.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
AWS	Amazon WorkSpaces, Amazon AppStream 2.0, Amazon DCV	—	—

Aliases

CVE-2025-0500 CVE-2025-0501

References

Issue with Amazon WorkSpaces and AppStream 2.0 Clients

advisory

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON