Cybersecurity researchers have identified and patched a critical security flaw in Amazon Web Services (AWS) Managed Workflows for Apache Airflow (MWAA), which could have allowed hackers to hijack user sessions and execute code remotely on the service’s infrastructure. Dubbed “FlowFixation” by Tenable, the vulnerability stemmed from a combination of session fixation and a misconfiguration in the AWS domain that facilitated cross-site scripting (XSS) attacks. This flaw could have enabled attackers to manipulate victims’ accounts to access sensitive data, change configurations, and trigger workflows, potentially leading to remote code execution (RCE) and further intrusion into other services. The discovery underscores broader issues with cloud domain architecture and management, affecting other giants like Microsoft Azure and Google Cloud, though AWS and Azure have since addressed the problem by updating their domain configurations. The episode highlights the growing importance of robust cybersecurity measures in cloud environments to protect against sophisticated web attacks and unauthorized access. CTIX analysts recommend all administrators keep their infrastructure up-to-date so that they may reap the benefits of early patching as more vulnerabilities are identified and remediated in the future.