high7.8
CVE-2026-7791
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows …
Impact
Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Amazon WorkSpaces For Windows | before 2.6.2034.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.