CVE-2026-86516 Details

A vulnerability exists in MockNest Serverless version 0.9.0, specifically within the AWS GitHub OIDC Deployment Helper Script. The issue arises from improper privilege management in the GitHub Actions OIDC role configuration, allowing for overly permissive access. This vulnerability can be exploited remotely by manipulating the OIDC role settings, which are managed through a CloudFormation template deployed via GitHub Actions.

To address this vulnerability, the GitHub Actions OIDC role should be updated to a more secure configuration. This involves deploying a revised CloudFormation template that restricts the role's permissions and ensures it only trusts the main branch of the repository. Instructions for updating the OIDC role can be found in the MockNest Serverless repository.