CVE-2026-86516 PUBLISHED

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.

• changli (VulDB User) reporter

• VDB-399670 | elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management
• VDB-399670 | CTI Indicators (IOB, IOC, TTP, IOA)
• CVE-2026-86516 | CVE Analysis and Report
• Submit #908568 | elenavanengelenmaslova mocknest-serverless 0.9.0 Improper Privilege Management
• https://github.com/elenavanengelenmaslova/mocknest-serverless/commit/6ab3147282d867c1993f995272750db091c2290b
• https://github.com/elenavanengelenmaslova/mocknest-serverless/pull/254
• https://github.com/elenavanengelenmaslova/mocknest-serverless/

• Improper Privilege Management CWE
• Incorrect Privilege Assignment CWE