The vulnerability was spotted in August 2025, so users should patch now.
And it's 'not unique to AWS,' researcher tells The Reg A critical misconfiguration in AWS's CodeBuild service allowed ...