CVE-2026-15737
Last modified
CVE-2026-15737 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and 1.5.0 might allow a local authenticated user with access to CloudWatch Logs to access raw user prompts and agent responses containing sensitive data via span attributes. The SDK wrote raw user prompts and complete agent responses into OpenTelemetry span attributes on every invocation without filtering or masking. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and 1.5.0 might allow a local authenticated user with access to CloudWatch Logs to access raw user prompts and agent responses containing sensitive data via span attributes. The SDK wrote raw user prompts and complete agent responses into OpenTelemetry span attributes on every invocation without filtering or masking. These spans flow into the customer's aws/spans CloudWatch log group, exposing sensitive content to any principal with log read access. We recommend you upgrade to version 1.5.1 or later. Users who ran affected versions should also review and purge sensitive content from their aws/spans CloudWatch log groups.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| AWS | bedrock-agentcore | 1.4.8; 1.5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-15737?
How severe is CVE-2026-15737?
How do I fix CVE-2026-15737?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-15730The GamiPress – Gamification plugin to reward points, achiev…6.4
- CVE-2026-15732A Server-Side Request Forgery (SSFR) vulnerability exist in …9.8
- CVE-2026-15733A Remote Code Execution (RCE) vulnerability exist in WGDashb…9.8
- CVE-2026-15734A Server-Side Template Injection (SSTI) vulnerability in WGD…9.8
- CVE-2026-15735The Contact Form to Any API plugin for WordPress is vulnerab…6.4
- CVE-2026-15736Snowflake SQLAlchemy versions prior to 1.11.0 contain severa…8.3
- CVE-2026-15738Incorrect behavior order in the Gateway API listener-rule ge…8.5
- CVE-2026-15739The Rich Showcase for Google Reviews plugin for WordPress is…6.4
- CVE-2026-1574The MyQtip – easy qTip2 plugin for WordPress is vulnerable t…6.4
- CVE-2026-15746Strands Agents is an open-source Python SDK for building and…6.9
- CVE-2026-15747Mojolicious versions from 4.59 before 9.48 for Perl expose a…9.1
- CVE-2026-15749A security flaw has been discovered in mastergo-design maste…5.3
Are you affected by CVE-2026-15737?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST