ACVE-2026-0411

In the wild

exploited-itw · 2025-07-13 – 2025-07-24 · vendor

Description

What

Amazon Q Developer for VS Code 1.84.0 carried an injected wiper prompt after a maintainer credential compromise. The vendor account says the payload failed because of a syntax error, while other public commentary disputed the damage assessment. This record classifies the malicious distribution, not a confirmed destructive outcome.

Which configuration is exposed

The exposed configuration enables the Amazon Q extension at marketplace vscode with version 1.84.0. The extension runs inside an IDE with access to the project and user tools, so a prompt or extension update can cross the same trust boundary as the developer assistant.

How ACVE detects it

ACVE matches plugin name, marketplace, and exact version. It cannot inspect the prompt content or establish whether the extension loaded the destructive instruction, and a different version does not match this poisoned-release identity.

Fix

Remove version 1.84.0, reinstall a reviewed release, and inspect project and user files for unexpected changes. Rotate maintainer and developer credentials if the extension was active during the window.

Grounding needed

The AWS advisory should be checked for the release, distribution window, and disputed impact language. The record retains exploited-itw for malicious distribution with no confirmed damage.

This record is limited to the condition named in the public source: Amazon Q VS Code 1.84.0 carried a destructive injected prompt. A match is a review signal for that condition, not a claim that every installation, package, model, or host was compromised. Operators should preserve the resolved evidence and investigate adjacent credentials, network exposure, and execution history before closing the finding. The result should be retained with the lock snapshot used for the match so later review can distinguish configuration drift from a changed public record.

Configuration

some plugins where
  and
    name eq "amazon.q"
    marketplace eq "vscode"
    version eq "1.84.0"

Fix

Remove Amazon Q 1.84.0 and reinstall a reviewed extension.

• Remove AgentPlugin:amazon.q@vscode@1.84.0.
• Reconfigure plugins. Review extension provenance before enabling it.

Validation

No validation entries recorded.

Grounding

No grounding checks recorded.

References

No references recorded.