{"data":{"id":"48dd6e09-a4bd-40b0-affa-c116a126cc13","title":"CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK","summary":"The Bedrock AgentCore Python SDK (a library for building AI agents on Amazon's platform) has a vulnerability where OpenTelemetry spans (data that tracks what a program is doing) were writing unfiltered user prompts and AI responses to CloudWatch logs (AWS's logging service). This meant that anyone with read access to those logs could see potentially sensitive information. The vulnerability affects versions 1.4.8 and 1.5.0.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-058-aws/","publishedAt":"2026-07-16T17:09:05.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon Bedrock","bedrock-agentcore Python SDK"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-16T17:09:05.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}