Vulnerabilities in pkg:npm/@aws/lsp-codewhisperer

PACKAGE
Advisory Identifier: GHSA-6v3r-4p5c-mrp5
Share
Advisory Summary

CVE-2026-12958 is a HIGH (CVSS 7.8) language servers for aws vulnerable vulnerability (CWE-61: UNIX Symbolic Link (Symlink) Following) affecting @aws/lsp codewhisperer libraries in the npm ecosystem. The issue involves language servers for aws vulnerable to arbitrary file write. Remediation is available by upgrading affected packages to version 0.0.117.

2 Known Advisory Record(s)
Package Vulnerability Intelligence

pkg:npm/@aws/lsp-codewhisperer

2 Known Advisory Record(s)

Vulnerability advisories affecting package pkg:npm/@aws/lsp-codewhisperer. Select an advisory below to view technical details or fixes.

Advisory ID CVE / NVD Severity Summary
GHSA-6v3r-4p5c-mrp5 CVE-2026-12958 HIGH Language Servers for AWS vulnerable to arbitrary file write
GHSA-xhcr-j4j9-3gh7 CVE-2026-12957 HIGH Language Servers for AWS Vulnerable to Arbitrary Code Execution

CVE-2026-12958 at a Glance

CVE Identifier CVE-2026-12958
GHSA Identifier GHSA-6v3r-4p5c-mrp5
Severity HIGH
CVSS v3.1 Base Score 7.8
CWE Classification CWE-61: UNIX Symbolic Link (Symlink) Following
Affected Product @aws/lsp codewhisperer
Package Ecosystem npm
Published Date
Last Updated

Security Impact

CVSS: 7.8

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Attack Vector Local (AV:L)
Attack Complexity Low (AC:L)
Privileges Required None (PR:N)
User Interaction Required (UI:R)
Scope Unchanged (S:U)
Confidentiality High (C:H)
Integrity High (I:H)
Availability High (A:H)

How to Fix CVE-2026-12958

To remediate this vulnerability, upgrade all affected @aws/lsp codewhisperer dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

@aws/lsp-codewhisperer fixed: 0.0.117 
npm install @aws/lsp-codewhisperer@0.0.117
Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

npm ls @aws/lsp-codewhisperer

How to Check if You Are Affected

To determine whether your Node.js application is affected by CVE-2026-12958, inspect your project dependencies using npm:

npm ls @aws/lsp-codewhisperer

Analyze the terminal output to locate any version of @aws/lsp codewhisperer in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than 0.0.117), your application is affected.

Note: The npm ls @aws/lsp-codewhisperer command inspects dependencies declared in your package.json and lockfile; it does not perform automated runtime dynamic scanning.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-61: UNIX Symbolic Link (Symlink) Following, where the product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. this could allow an attacker to cause the product to operate on unauthorized files. In @aws/lsp codewhisperer, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

## Summary Language Servers for AWS (the aws/language-servers project) provides the Language Server Protocol implementations that power AWS developer tooling, including the Amazon Q Developer agentic chat experience, across IDEs such as VS Code, JetBrains, Visual Studio, and Eclipse. Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace containing a maliciously crafted symlink that resolves to a file path outside the workspace trust boundary. ## Impact If a user opens a maliciously crafted workspace containing a symlink that resides within the workspace but resolves to a location outside the workspace trust boundary, the agent may follow that symlink and write to the external location without prompting the user for approval. This can result in the modification of files outside the intended workspace boundary. This issue is triggered when a user opens a workspace, trusts it, and the agent subsequently writes to a path within that workspace. Impacted versions: Language Servers for AWS version <1.69.0. ## Patches This issue has been addressed in AWS Language Servers version 1.69.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes. ## Workarounds No workarounds are available. ## References If you have any questions or comments about this advisory, AWS Security ask that you contact them via their [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue. ## Acknowledgement AWS Security would like to thank Wiz and Maor Dokhanian for collaborating on this issue through the coordinated vulnerability disclosure process.

CVE-2026-12958 Affected @aws/lsp codewhisperer Versions

1 component(s)
Fixed Versions:
0.0.117
Product / Package Ecosystem Affected Versions Fixed Version
@aws/lsp-codewhisperer
npm/@aws/lsp-codewhisperer
npm
< 0.0.117
0.0.117

References

GitHub Advisory / Wiki ADVISORY
https://github.com/aws/language-servers/security/advisories/GHSA-6v3r-4p5c-mrp5
NVD — CVE-2026-12958 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-12958
@aws/lsp codewhisperer Source Repository REPOSITORY
https://github.com/Amazon-Q-Developer/language-servers/pull/2742
Security Fix Commit FIX COMMIT
https://github.com/Amazon-Q-Developer/language-servers/commit/6c279b083cc192aa5df1f38c2c185576fd5234f5
@aws/lsp codewhisperer Security Information SECURITY
https://aws.amazon.com/security/security-bulletins/2026-047-aws
@aws/lsp codewhisperer Release RELEASE
https://github.com/Amazon-Q-Developer/language-servers/releases/tag/agentic-rc-1.69.0
@aws/lsp codewhisperer Release RELEASE
https://github.com/Amazon-Q-Developer/language-servers/releases/tag/lsp-codewhisperer/v0.0.117
@aws/lsp codewhisperer Source Repository REPOSITORY
https://github.com/aws/language-servers

Frequently Asked Questions

What is CVE-2026-12958?
CVE-2026-12958 is a security vulnerability in @aws/lsp codewhisperer involving Language Servers for AWS vulnerable to arbitrary file write under CWE-61: UNIX Symbolic Link (Symlink) Following.
Which @aws/lsp codewhisperer versions are affected?
Affected versions include releases prior to 0.0.117 across affected packages: @aws/lsp-codewhisperer.
What version fixes CVE-2026-12958?
Upgrading to 0.0.117 (or the latest patched release for your respective branch) resolves the vulnerability.
Is @aws/lsp-codewhisperer affected?
Yes, @aws/lsp-codewhisperer is affected in releases prior to 0.0.117. Upgrade your dependency to 0.0.117 or later.
What is the CVSS score of CVE-2026-12958?
CVE-2026-12958 has a CVSS v3.1 base score of 7.8 (HIGH) with vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
What CWE is associated with CVE-2026-12958?
CVE-2026-12958 is classified under CWE-61: UNIX Symbolic Link (Symlink) Following (The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.).
How can I check npm dependencies for CVE-2026-12958?
Run the dependency tree command: 'npm ls @aws/lsp-codewhisperer'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-6v3r-4p5c-mrp5",
  "modified" : "2026-09-24T19:15:40Z",
  "published" : "2026-09-24T19:15:39Z",
  "aliases" : [ "CVE-2026-12958" ],
  "summary" : "Language Servers for AWS vulnerable to arbitrary file write",
  "details" : "## Summary\nLanguage Servers for AWS (the aws/language-servers project) provides the Language Server Protocol implementations that power AWS developer tooling, including the Amazon Q Developer agentic chat experience, across IDEs such as VS Code, JetBrains, Visual Studio, and Eclipse.\n\nMissing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace containing a maliciously crafted symlink that resolves to a file path outside the workspace trust boundary.\n\n## Impact\n\nIf a user opens a maliciously crafted workspace containing a symlink that resides within the workspace but resolves to a location outside the workspace trust boundary, the agent may follow that symlink and write to the external location without prompting the user for approval. This can result in the modification of files outside the intended workspace boundary.\n\nThis issue is triggered when a user opens a workspace, trusts it, and the agent subsequently writes to a path within that workspace.\n\nImpacted versions: Language Servers for AWS version <1.69.0.\n\n## Patches\nThis issue has been addressed in AWS Language Servers version 1.69.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes. \n\n## Workarounds\nNo workarounds are available.\n\n## References\nIf you have any questions or comments about this advisory, AWS Security ask that you contact them via their [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n## Acknowledgement \n\nAWS Security would like to thank Wiz and Maor Dokhanian for collaborating on this issue through the coordinated vulnerability disclosure process.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
  }, {
    "type" : "CVSS_V4",
    "score" : "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@aws/lsp-codewhisperer"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "0.0.117"
      } ]
    } ]
  } ],
  "references" : [ {
    "type" : "WEB",
    "url" : "https://github.com/aws/language-servers/security/advisories/GHSA-6v3r-4p5c-mrp5"
  }, {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-12958"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/Amazon-Q-Developer/language-servers/pull/2742"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/Amazon-Q-Developer/language-servers/commit/6c279b083cc192aa5df1f38c2c185576fd5234f5"
  }, {
    "type" : "WEB",
    "url" : "https://aws.amazon.com/security/security-bulletins/2026-047-aws"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/Amazon-Q-Developer/language-servers/releases/tag/agentic-rc-1.69.0"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/Amazon-Q-Developer/language-servers/releases/tag/lsp-codewhisperer/v0.0.117"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/aws/language-servers"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-61" ],
    "severity" : "HIGH",
    "github_reviewed" : true,
    "github_reviewed_at" : "2026-09-24T19:15:39Z",
    "nvd_published_at" : "2026-06-23T17:16:41Z"
  }
}