Amazon Confirms WorkSpaces Linux Client Authentication Issue

Amazon has issued a security update for its Linux WorkSpaces client to address a high-severity vulnerability that could allow unauthorized access to user accounts. The vulnerability, known as CVE-2025-12779, affects Linux WorkSpaces client versions 2023.0 through 2024.8 and has a Common Vulnerability Scoring System rating of 8.8, indicating a significant risk to users.

What is the vulnerability and how does it work?

The vulnerability is caused by an improper handling of authentication tokens in the Linux client, which could allow an unintended user to extract a valid authentication token from the client machine and access another user’s WorkSpace. This means that if an attacker gains access to a user’s client machine, they could potentially access the user’s WorkSpace and sensitive data.

Amazon Web Services has confirmed that the issue was fixed in the Amazon WorkSpaces client for Linux version 2025.0 and recommends upgrading to this or a later version to remediate the issue. The company has also proactively communicated with customers regarding the end of support for the impacted client versions.

What can users do to protect themselves?

To protect themselves from this vulnerability, users should update their Linux WorkSpaces client to version 2025.0 or later as soon as possible. This will ensure that the authentication tokens are handled properly and reduce the risk of unauthorized access to their WorkSpace. Users should also be cautious when accessing their WorkSpace from public or shared computers, as this could increase the risk of their authentication token being compromised.

It’s worth noting that this vulnerability is just one example of the many security risks that exist in the cloud computing space. As more businesses move their operations to the cloud, the risk of security breaches and vulnerabilities increases. Therefore, it’s essential for users to stay informed about potential security risks and take steps to protect themselves, such as keeping their software up to date and being cautious when accessing sensitive data from public or shared computers.