Amazon WorkSpaces Skylight Agent Improper Privilege Management Vulnerability Allowing Local Privilege Escalation

A vulnerability in the Skylight Workspace Config Service of Amazon WorkSpaces for Windows, prior to version 2.6.2034.0, allows local non-admin authenticated users to bypass file system permission protections. This is achieved by exploiting improper privilege management in the log rotation mechanism, enabling the placement of arbitrary files into various locations. The vulnerability leads to unauthorized privilege escalation to the SYSTEM level.

Impact

Exploitation of this vulnerability allows local non-admin authenticated users to escalate privileges to the SYSTEM level.

Remediation

Users are advised to upgrade to version 2.6.2034.0 or later.