MediumVulnerability

CVE-2026-15737: AWS Bedrock AgentCore Python SDK logs sensitive prompts and responses in spans

Source: NVD(opens in a new tab)
Identifier: CVE-2026-15737
Published: July 16, 2026
Record updated: October 9, 2026

Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 0.4%

Summary

CVE-2026-15737 affects the OpenTelemetry instrumentation in the AWS Bedrock AgentCore Python SDK, versions 1.4.8 and 1.5.0. The SDK wrote raw user prompts and complete agent responses into span attributes on every invocation, without filtering or masking. A local authenticated user with read access to CloudWatch Logs can view that sensitive content in the customer's aws/spans log group.

Mitigation

Upgrade to version 1.5.1 or later. Users who ran affected versions should also review and purge sensitive content from their aws/spans CloudWatch log groups.

Details

Scores and exploitation

CVSS score: 5.7(medium)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Attack vector: network
Attack complexity: low
Privileges required: low
User interaction: required
EPSS: 0.4%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on November 4, 2026.
Disclosure date: July 16, 2026

Weaknesses and techniques

Weakness (CWE): CWE-532
Attack pattern (CAPEC): CAPEC-215

Affected

Vendors: Amazon

Classification

Attack type: PII leakage
Attack sophistication: Trivial
AI component targeted: API
Impact: Confidentiality
Labels: security,
privacy

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative. The source gives this advisory a description and no title, so the title above is a headline generated from the source text.

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-15737

First tracked: July 17, 2026 at 02:08 AM ET, from NVD/CVE Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 93% (self-assessed)

Topics

AI agents

Summary

Mitigation

Topics

Related items