kerberosmansour hulumi

3 known vulnerabilities in kerberosmansour hulumi, 2 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-82862 CVSS 8.6 high Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended…
CVE-2026-82859 CVSS 9.3 critical hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections…
CVE-2026-82857 CVSS 9.3 critical hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle…