Missing Authorization in Amazon Connect Salesforce Lambda Function

CVE-2026-94384

What is CVE-2026-94384?

CVE-2026-94384 is a vulnerability identified in the Amazon Connect Salesforce Lambda Function, specifically versions prior to 5.26. This function is designed to facilitate integration between Amazon Connect and Salesforce by enabling interactions through AWS Lambda. The flaw arises from a missing authorization check, allowing any AWS Identity and Access Management (IAM) principal with permission to invoke the Lambda function to escalate privileges. This could lead to unauthorized execution of AWS API operations that should be restricted for specific IAM identities. Due to the lack of proper authorization validation, attackers could exploit this vulnerability to manipulate sensitive AWS services, risking the integrity and confidentiality of cloud resources and data.

Potential Impact of CVE-2026-94384

1. Privilege Escalation: The primary consequence of this vulnerability is the potential for privilege escalation. Attackers can exploit the invitation to invoke the Lambda function, thereby gaining access to perform actions that would normally be prohibited for their IAM identity. This raises severe concerns regarding unauthorized access to sensitive data and operations in AWS environments.

2. Unauthorized AWS API Operations: Due to the lack of authorization validation, attackers could execute privileged service APIs, which could lead to data breaches or unauthorized modifications to cloud resources. This can have catastrophic implications for organizations, as it compromises the security framework established by IAM policies.

3. Impact on Compliance and Security Posture: Organizations relying on Amazon Connect and Salesforce would face significant challenges in maintaining compliance with security standards and regulations. The exploitation of this vulnerability could result in loss of customer trust, legal ramifications, and severe damage to an organization's reputation. Maintaining a strong security posture becomes increasingly critical as threats evolve and vulnerabilities like CVE-2026-94384 emerge.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

This is an advertDeploy the Patch →

References