Vulnerability · Published Oct 9, 2026 · Assigned by AMZN

CVE-2026-107783Insertion of sensitive information into log file in AWS Tools for PowerShell

Medium 5.9

In plain English

A medium-severity sensitive data in logs in aws-tools-for-powershell from AWS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium

Exploit odds (30 days)0.1%top 99.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later. After upgrading, review PowerShell transcripts and log stores for previously disclosed passwords and rotate any affected IAM console passwords.

Affected products (as reported)

Vendor	Product	Versions
AWS	aws-tools-for-powershell	0 – through 5.0.305

Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

References

https://github.com/aws/aws-tools-for-powershell/releases/tag/5.0.306 release-notes, patch
https://aws.amazon.com/security/security-bulletins/2026-132-aws/ vendor-advisory
https://github.com/aws/aws-tools-for-powershell/security/advisories/GHSA-q3x5-q6rm-c7p3 third-party-advisory