CVE-2026-107783: CWE-532 Insertion of sensitive information into log file in AWS aws-tools-for-powershell
Description
Bulletin ID: 2026-132-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 08:30 AM PDT Description: AWS Tools for PowerShell V5 lets developers and administrators manage their AWS services from the PowerShell scripting environment. We identified CVE-2026-107783, where insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. Impacted versions: <= v5.0.305 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
CVSS v3.1
Score 5.9medium
Affected software
AWS
aws-tools-for-powershell
pkg:nuget/aws-tools-for-powershellRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-532) affects AWS Tools for PowerShell versions up to and including 5.0.305. It involves the insertion of sensitive information—IAM user cleartext AWS Management Console passwords—into log files and command output. Local users with access to these logs could potentially recover these passwords. The vulnerability has a CVSS 3.1 score of 5.9 (medium severity) with an attack vector of local access, low attack complexity, low privileges required, and requiring user interaction. AWS has released a fix in version 5.0.306. The vendor advisory confirms the issue and recommends upgrading to the fixed version and reviewing logs for exposed credentials.
Potential Impact
Local users with access to the affected system's logs or PowerShell command output could recover IAM user cleartext AWS Management Console passwords, potentially leading to unauthorized access to AWS resources. The vulnerability does not affect confidentiality beyond the exposed passwords and does not impact integrity or availability. The scope is changed due to potential credential exposure.
Mitigation Recommendations
Upgrade AWS Tools for PowerShell to version 5.0.306 or later. After upgrading, review all PowerShell transcripts and log stores for any previously disclosed passwords and rotate any IAM console passwords that may have been exposed. This official fix fully addresses the vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- AMZN
- Date Reserved
- 2026-10-08T20:07:21.397Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Is Cloud Service
- true
- Vendor Advisory Urls
- [{"url":"https://aws.amazon.com/security/security-bulletins/2026-132-aws/","vendor":"AWS"}]
Threat ID: 6ac910762cdf04f656697274
Added to database: 10/09/2026, 16:04:06 UTC
Last enriched: 10/09/2026, 16:18:38 UTC
Last updated: 10/09/2026, 17:05:31 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.