CVE-2021-32090

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

2%p81

Published

May 7, 2021 (May 7, 2021)

Modified

Jun 17, 2026

Description

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

Vendors: localstack
Products: localstack
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.