Amazon WorkSpaces for Linux Vulnerability Exposes Valid Auth Tokens to Attackers

A recently disclosed vulnerability in the Amazon WorkSpaces client for Linux exposes a flaw that could let attackers gain unauthorized access to user environments by improperly handling authentication tokens. The issue is tracked as CVE-2025-12779 and prompted an urgent response from Amazon Web Services, with AWS releasing security bulletin AWS-2025-025 on 5 November 2025.

The affected products are the WorkSpaces client for Linux, with versions 2023.0 through 2024.8 being implicated; AWS advises upgrading to 2025.0 or newer to remediate the flaw. The flaw could allow other local users on the same machine to extract a valid authentication token left accessible by the WorkSpaces client, potentially giving them control over another user’s Workspace session in multi-user or shared Linux environments.

AWS has proactively notified organisations and individuals about the end of support for the affected versions, and the fix is included in the 2025.0 release. Users can download the fixed version from the official Amazon WorkSpaces Client Download page, with further security concerns referred to via aws-security@amazon[.]com. According to the announcement, organisations are urged to action upgrades promptly to mitigate token-management weaknesses in cloud desktop environments.