CVE-2026-107783

Insertion of sensitive information into log file in AWS Tools for PowerShell

State: Published
Severity: 6.7 Medium
Published: Oct 9, 2026
Updated: Oct 9, 2026
Reserved: Oct 8, 2026

Description

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts.

To remediate this issue, users should upgrade to version 5.0.306 or later. After upgrading, review PowerShell transcripts and log stores for previously disclosed passwords and rotate any affected IAM console passwords.

Scores

CVSS	Score	Vector	Source
4.0	6.7 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N	AMZN
3.1	5.9 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N	AMZN

Weaknesses

CWE-532 Insertion of sensitive information into log file

Affected Products

Product	Versions
aws-tools-for-powershellAWS	5.0.305 and earlierAffected

References

https://github.com/aws/aws-tools-for-powershell/releases/tag/5.0.306release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-132-aws/vendor-advisory
https://github.com/aws/aws-tools-for-powershell/security/advisories/GHSA-q3x5-q6rm-c7p3third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.