CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK
Bulletin ID: 2026-058-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/16/2026 10:15 AM PDT Description: Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. We identified CVE-2026-15737 in the OpenTelemetry instrumentation of the SDK. Affected versions wrote raw user prompts and complete agent responses into OpenTelemetry span attributes on every invocation without filtering or masking. These spans flow into the customer's aws/spans CloudWatch log group, where a local authenticated user with CloudWatch Logs read access could access the potentially sensitive content. Impacted versions: 1.4.8, 1.5.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
AI Analysis
Technical Summary
The Bedrock AgentCore Python SDK (bedrock-agentcore) versions 1.4.8 and 1.5.0 contain a vulnerability (CVE-2026-15737) in their OpenTelemetry instrumentation that causes raw user prompts and complete agent responses to be recorded in OpenTelemetry span attributes without any filtering or masking. These spans are sent to the aws/spans CloudWatch log group, exposing sensitive content to any local authenticated user with read access to CloudWatch Logs. The vulnerability is resolved in version 1.5.1, which removes or masks sensitive data from these spans. Users running affected versions should upgrade to 1.5.1 or later and remove sensitive data from existing logs.
Potential Impact
Sensitive user prompts and agent responses are exposed in CloudWatch logs, potentially allowing local authenticated users with CloudWatch Logs read access to view sensitive information. This could lead to unintended disclosure of confidential or private data processed by the SDK.
Mitigation Recommendations
Upgrade the Bedrock AgentCore Python SDK to version 1.5.1 or later, which addresses this vulnerability by preventing sensitive data from being logged in OpenTelemetry spans. Additionally, review and purge any sensitive content from the aws/spans CloudWatch log groups. No workarounds are available.
CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK
Description
Bulletin ID: 2026-058-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/16/2026 10:15 AM PDT Description: Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. We identified CVE-2026-15737 in the OpenTelemetry instrumentation of the SDK. Affected versions wrote raw user prompts and complete agent responses into OpenTelemetry span attributes on every invocation without filtering or masking. These spans flow into the customer's aws/spans CloudWatch log group, where a local authenticated user with CloudWatch Logs read access could access the potentially sensitive content. Impacted versions: 1.4.8, 1.5.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Bedrock AgentCore Python SDK (bedrock-agentcore) versions 1.4.8 and 1.5.0 contain a vulnerability (CVE-2026-15737) in their OpenTelemetry instrumentation that causes raw user prompts and complete agent responses to be recorded in OpenTelemetry span attributes without any filtering or masking. These spans are sent to the aws/spans CloudWatch log group, exposing sensitive content to any local authenticated user with read access to CloudWatch Logs. The vulnerability is resolved in version 1.5.1, which removes or masks sensitive data from these spans. Users running affected versions should upgrade to 1.5.1 or later and remove sensitive data from existing logs.
Potential Impact
Sensitive user prompts and agent responses are exposed in CloudWatch logs, potentially allowing local authenticated users with CloudWatch Logs read access to view sensitive information. This could lead to unintended disclosure of confidential or private data processed by the SDK.
Mitigation Recommendations
Upgrade the Bedrock AgentCore Python SDK to version 1.5.1 or later, which addresses this vulnerability by preventing sensitive data from being logged in OpenTelemetry spans. Additionally, review and purge any sensitive content from the aws/spans CloudWatch log groups. No workarounds are available.
Technical Details
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-058-aws/","fetched":true,"fetchedAt":"2026-07-16T17:13:06.493Z","wordCount":199}
- Classification
- {"confidence":0.88,"severitySource":"heuristic","classifier":"rss-v2"}
Threat ID: 6a59112268715ace43654905
Added to database: 07/16/2026, 17:13:06 UTC
Last enriched: 08/08/2026, 17:29:54 UTC
Last updated: 08/28/2026, 22:52:08 UTC
Views: 123
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.