[ CVE-2025-69723 · Published 22 Oct 2026 ]
Vulnerability
Not scored yet
No fix listed yet
[ Description ]Official description
A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.