CVE-2026-62909 (MEDIUM): detected in Lambda Docker Images.

[the-lambda-watchdog]

CVE Details

CVE ID	Severity	Affected Package	Installed Version	Fixed Version	Date Published	Date of Scan
CVE-2026-62909	MEDIUM	Microsoft.NETCore.App.Runtime.linux-x64	10.0.9	10.0.11, 9.0.19, 8.0.30	2026-08-11T17:18:44.817Z	2026-08-12T10:18:17.360637319Z

---

Affected Docker Images

Image Name	SHA
public.ecr.aws/lambda/dotnet:latest	public.ecr.aws/lambda/dotnet@sha256:c9482220b0381bf38cce8a463e41a550b42ffbd79f75bfacc513c7dd68677eb7
public.ecr.aws/lambda/dotnet:10	public.ecr.aws/lambda/dotnet@sha256:c9482220b0381bf38cce8a463e41a550b42ffbd79f75bfacc513c7dd68677eb7
public.ecr.aws/lambda/dotnet:9	public.ecr.aws/lambda/dotnet@sha256:7f4b9904f80cc6c8c935ebe0d2dc84c4c43bba4950c1d11ef24ce335f49040e0
public.ecr.aws/lambda/dotnet:8	public.ecr.aws/lambda/dotnet@sha256:6d9f178b4c0a4ee45676b4baa9d233dd24b53ab404db2be3c765fff33cc4f7ce

---

Description

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

---

Remediation Steps

• Update the affected package Microsoft.NETCore.App.Runtime.linux-x64 from version 10.0.9 to 10.0.11, 9.0.19, 8.0.30.

About this issue

• This issue may not contain all the information about the CVE nor the images it affects.
• This issue will not be updated with new information and the list of affected images may have changed since the creation of this issue.
• For more, visit Lambda Watchdog.
• This issue was created automatically by Lambda Watchdog.