CVE-2026-89066

Vendor

VMware (Broadcom)

Product

workstation

CVSS

7.8

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 15
   CVE NVD 11 Sep 2026

   Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow…

   Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or…

   CVSS 7.8 Fix available CVE-2026-89066 VMware (Broadcom)
2. 14
   AWS bulletin AWS 7d ago

   CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection

   CVE-2026-89065CVE-2026-89066 Amazon Web Services