The vulnerability is a misconfigured file permission in the CodeCatalyst connection handler in AWS Toolkit for Visual Studio Code. Before 4.10.0, token cache files that hold CodeCatalyst bearer tokens were created with world‑readable permissions. A local user can read these files and retrieve an active token, allowing unauthorized use of the token to access AWS resources. This weakness corresponds to CWE‑276 (Incorrect Default Permissions) and CWE‑459 (Weakness in a Library’s Interaction with the Host).

The affected product is the AWS Toolkit for Visual Studio Code, provided by Amazon Web Services. All releases prior to version 4.10.0 are vulnerable; the vendor explicitly identifies every version before 4.10.0 as impacted. No other vendors or product lines are involved. The vulnerability affects the local cache of bearer tokens used by the CodeCatalyst connection handler.

The CVSS score of 6.8 indicates a moderate severity. The EPSS score is not available, reflecting a lack of publicly reported exploitation data. The vulnerability is not listed in the CISA KEV catalog. The attack vector is local: an authenticated or resourceful local user can read the cache files and obtain a bearer token. With the token, an attacker can access CodeCatalyst services or other AWS resources, potentially escalating privileges or exfiltrating data. No additional network access beyond the local machine is required.