CVE-2026-15737
Received Received - Intake

Sensitive Data Exposure in AWS Bedrock AgentCore Python SDK

Publication date: 2026-07-16

Last updated on: 2026-07-16

Assigner: AMZN

Description
AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and 1.5.0 might allow a local authenticated user with access to CloudWatch Logs to access raw user prompts and agent responses containing sensitive data via span attributes. The SDK wrote raw user prompts and complete agent responses into OpenTelemetry span attributes on every invocation without filtering or masking. These spans flow into the customer's aws/spans CloudWatch log group, exposing sensitive content to any principal with log read access. We recommend you upgrade to version 1.5.1 or later. Users who ran affected versions should also review and purge sensitive content from their aws/spans CloudWatch log groups.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-16
Last Modified
2026-07-16
Generated
2026-07-16
AI Q&A
2026-07-16
EPSS Evaluated
N/A
NVD
CVE-2026-15737
EUVD
EUVD-2026-44988

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
amazon bedrock_agentcore_python_sdk 1.5.1
amazon bedrock_agentcore_python_sdk 1.4.8
amazon bedrock_agentcore_python_sdk 1.5.0
aws bedrock_agentcore_python_sdk 1.4.8
aws bedrock_agentcore_python_sdk 1.5.0
aws bedrock_agentcore_python_sdk From 1.5.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-532 The product writes sensitive information to a log file.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the AWS Bedrock AgentCore Python SDK versions 1.4.8 and 1.5.0. The OpenTelemetry instrumentation in these versions logs raw user prompts and complete agent responses into OpenTelemetry span attributes without filtering or masking. These spans are stored in the customer's aws/spans CloudWatch log group, potentially exposing sensitive data to any user with CloudWatch Logs read access.

Detection Guidance

Check CloudWatch Logs for the aws/spans log group. Look for OpenTelemetry span attributes containing raw user prompts or agent responses. Use AWS CLI commands like 'aws logs filter-log-events --log-group-name /aws/spans' to inspect logs for sensitive data exposure.

Impact Analysis

A local authenticated user with access to CloudWatch Logs could view raw user prompts and agent responses containing sensitive data. This could lead to unauthorized access to confidential information such as personal data, credentials, or other sensitive content processed by the AI agent.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR and HIPAA by exposing sensitive personal data in logs. Organizations may face legal penalties, loss of customer trust, and increased regulatory scrutiny due to unauthorized access to protected information.

Mitigation Strategies

Upgrade to AWS Bedrock AgentCore Python SDK version 1.5.1 or later immediately. Review and purge sensitive content from the aws/spans CloudWatch log group. Ensure no local authenticated users have unnecessary CloudWatch Logs read access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15737. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart