CVE-2026-71215

AWS Lambda MicroVM State Isolation Flaw Enables Cross-Invocation STS Session Key Recovery in Custom Runtimes (CVE-2026-71215)

AWS issues advisory CVE-2026-71215 for Lambda Custom Runtimes, addressing a Firecracker microVM memory reclamation flaw that exposed ephemeral STS tokens.