CVE-2026-7422 | AWS FreeRTOS-Plus-TCP up to 4.2.5/4.4.0 Loopback Detection authentication spoofing

A vulnerability identified as critical has been detected in AWS FreeRTOS-Plus-TCP up to 4.2.5/4.4.0. The affected element is an unknown function of the component Loopback Detection. Performing a manipulation results in authentication bypass by spoofing.

This vulnerability is identified as CVE-2026-7422. The attack can only be performed from the local network. There is not any exploit available.

You should upgrade the affected component.