high7.8
CVE-2026-85656
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands …
Impact
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Amazon Linux | before 1.3-9 |
Versions were read from the advisory text. No structured product data has been published for this record yet.