“Just two missing characters in a Regex filter allowed unauthenticated attackers to infiltrate the build environment and leak privileged credentials”

This is a well written disclosure document 👍

https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild

~ updated at: 2026-01-16T10:48:18.024Z