CVE-2021-32090: Localstack

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

Affected products

• Localstack Localstack: version 0.12.6 only

Published 2021-05-07. Last modified 2026-06-17.