{"data":{"id":"388a0fa9-8335-4a41-8516-e1031ffde21a","title":"CVE-2026-15737: AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on…","summary":"CVE-2026-15737 affects the OpenTelemetry instrumentation in the AWS Bedrock AgentCore Python SDK, versions 1.4.8 and 1.5.0. The SDK wrote raw user prompts and complete agent responses into span attributes on every invocation, without filtering or masking. A local authenticated user with read access to CloudWatch Logs can view that sensitive content in the customer's aws/spans log group.","solution":"Upgrade to version 1.5.1 or later. Users who ran affected versions should also review and purge sensitive content from their aws/spans CloudWatch log groups.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-15737","publishedAt":"2026-07-16T18:16:42.537Z","cveId":"CVE-2026-15737","cweIds":["CWE-532"],"cvssScore":"5.7","cvssSeverity":"medium","severity":"medium","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS Bedrock AgentCore Python SDK","Amazon Bedrock AgentCore","CloudWatch Logs"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AWS Bedrock AgentCore Python SDK logs sensitive prompts and responses in spans","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00382,"epssCheckedAt":"2026-11-04T06:10:13.969Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-02T12:09:03.600Z","patchAvailable":null,"disclosureDate":"2026-07-16T18:16:42.537Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-215"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}