Amazon Fixes High-Severity Authentication Token Exposure in WorkSpaces Client for Linux (CVE-2025-12779)

Amazon has released a security update for the WorkSpaces client for Linux to address a high-severity vulnerability, CVE-2025-12779, that could allow local users to extract valid authentication tokens and gain unauthorized access to another user’s WorkSpace. The flaw, rated CVSS 8.8, affects Linux clients versions 2023.0 through 2024.8 and has been patched in version 2025.0, with Amazon urging all Linux users to upgrade immediately.

In practical terms, the vulnerability could enable an unintended local user to extract a token from a shared or multi-user system and use it to authenticate into another user’s WorkSpace session, effectively accessing files, applications and internal systems. According to Amazon’s advisory, under certain circumstances an unintended user may be able to extract a valid authentication token from the client machine and access another user’s WorkSpace.

Amazon notes that the issue does not enable remote exploitation, but its impact is significant in multi-user environments such as corporate terminals and shared virtual machines. Customers can download the updated WorkSpaces client for Linux from the official download page.