Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to shadow the intended helper script. Attackers can place malicious files in the workspace to execute arbitrary code during local skill execution.

CVE-2026-82862 affects Hulumi versions before v1.3.2, where the threat-model helper script is resolved from an unsafe root directory. This flaw allows workspace files to shadow the intended helper script, enabling attackers to place malicious files in the workspace. When a local skill execution occurs, the malicious file is executed instead of the legitimate helper script, resulting in arbitrary code execution. The vulnerability is classified as high severity. Users are advised to upgrade to Hulumi v1.3.2 or later to remediate the issue. The advisory is referenced by both the GitHub Security Advisories and VulnCheck.