CVE-2025-12815

MEDIUM
STIX 2.1 vulnerability

Record summary

CVE-2025-12815 has a selected CVSS score of 5.3 (medium).

Description

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots. To mitigate this issue, users should upgrade to version 2025.09 or above.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 6, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Research and Engineering Studio (RES)

Browse AWS / Research and Engineering Studio (RES)

Default status: unaffected

CVE List2025.09unaffected

References

3