{
  "schema_version": "1.6.0",
  "id": "ACVE-2026-0411",
  "aliases": [],
  "modified": "2026-09-20T00:00:00Z",
  "summary": "Amazon Q VS Code 1.84.0 carried a destructive injected prompt",
  "details": "## What\n\nAmazon Q Developer for VS Code 1.84.0 carried an injected wiper prompt after a maintainer credential compromise. The vendor account says the payload failed because of a syntax error, while other public commentary disputed the damage assessment. This record classifies the malicious distribution, not a confirmed destructive outcome.\n\n## Which configuration is exposed\n\nThe exposed configuration enables the Amazon Q extension at marketplace vscode with version 1.84.0. The extension runs inside an IDE with access to the project and user tools, so a prompt or extension update can cross the same trust boundary as the developer assistant.\n\n## How ACVE detects it\n\nACVE matches plugin name, marketplace, and exact version. It cannot inspect the prompt content or establish whether the extension loaded the destructive instruction, and a different version does not match this poisoned-release identity.\n\n## Fix\n\nRemove version 1.84.0, reinstall a reviewed release, and inspect project and user files for unexpected changes. Rotate maintainer and developer credentials if the extension was active during the window.\n\n## Grounding needed\n\nThe AWS advisory should be checked for the release, distribution window, and disputed impact language. The record retains exploited-itw for malicious distribution with no confirmed damage.\n\nThis record is limited to the condition named in the public source: Amazon Q VS Code 1.84.0 carried a destructive injected prompt. A match is a review signal for that condition, not a claim that every installation, package, model, or host was compromised. Operators should preserve the resolved evidence and investigate adjacent credentials, network exposure, and execution history before closing the finding. The result should be retained with the lock snapshot used for the match so later review can distinguish configuration drift from a changed public record.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentPlugin",
        "name": "amazon.q@vscode"
      },
      "versions": [
        "1.84.0"
      ],
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "HIGH",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "kind": "code",
      "vulnClasses": [
        "supply-chain",
        "command-injection"
      ],
      "cwe": [
        "CWE-78"
      ],
      "exploitation": {
        "status": "exploited-itw",
        "checkedAt": "2026-09-20T00:00:00Z",
        "sources": [
          {
            "url": "https://github.com/aws/aws-toolkit-vscode/security/advisories/GHSA-7g7f-ff96-5gcw",
            "type": "vendor"
          }
        ],
        "kev": {
          "listed": false
        },
        "first_seen": "2025-07-13",
        "last_seen": "2025-07-24",
        "victims": {
          "range": "unverifiable",
          "sectors": [
            "software"
          ],
          "evidence": "AWS described a distributed wiper prompt but stated the payload failed on a syntax error; damage claims were disputed."
        },
        "attribution": "unattributed PR author"
      },
      "cveBoundary": "supply-chain",
      "matcher": {
        "some": "plugins",
        "where": {
          "all": [
            {
              "field": "name",
              "op": "eq",
              "value": "amazon.q"
            },
            {
              "field": "marketplace",
              "op": "eq",
              "value": "vscode"
            },
            {
              "field": "version",
              "op": "eq",
              "value": "1.84.0"
            }
          ]
        }
      },
      "fix": {
        "summary": "Remove Amazon Q 1.84.0 and reinstall a reviewed extension.",
        "actions": [
          {
            "type": "remove",
            "target": "AgentPlugin:amazon.q@vscode@1.84.0"
          },
          {
            "type": "reconfigure",
            "target": "plugins",
            "why": "Review extension provenance before enabling it."
          }
        ]
      },
      "noCveReason": "No CVE assigned; this record describes a configuration or supply-chain condition.",
      "grounding": {
        "itw": {
          "checkedAt": "2026-09-20T16:17:39Z",
          "sources": [
            {
              "url": "https://github.com/aws/aws-toolkit-vscode/security/advisories/GHSA-7g7f-ff96-5gcw",
              "status": 200,
              "contentType": "text/html; charset=utf-8",
              "sha256": "sha256:be5d3019ef6e73f8086413b3bbc53292387300016bda4aad5d6cb723ee0bad97",
              "type": "vendor"
            }
          ],
          "kev": {
            "listed": false
          }
        }
      }
    }
  }
}