CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

unknownCVE-2026-15737

Bulletin ID: 2026-058-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/16/2026 10:15 AM PDT Description: Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. We identified CVE-2026-15737 in the OpenTelemetry instrumentation of the SDK. Affected versions wrote raw user prompts and complete agent responses into OpenTelemetry span attributes on every invocation without filtering or masking. These spans flow into the customer's aws/spans CloudWatch log group, where a local authenticated user with CloudWatch Logs read access could access the potentially sensitive content. Impacted versions: 1.4.8, 1.5.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

CSIRTS triage

vendor: AWS product: Bedrock AgentCore Python SDK Information disclosureaffected: 1.4.8, 1.5.0

What: The vulnerability allows sensitive content to be disclosed via OpenTelemetry spans in the SDK.
Who is affected: Local authenticated users with CloudWatch Logs read access are affected.
Urgency: Remediation is important as it involves potential exposure of sensitive information, although exploitation is not currently active.
Action: Users should upgrade to a patched version of the SDK.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Bedrock AgentCore Python SDK

Get an email when a new Bedrock AgentCore Python SDK advisory drops — max one per day, one-click unsubscribe.

Details

Source: AWS Security Bulletins (INTL · vendor-psirt · site)
Severity: unknown
Published: 2026-08-20
Exploitation: Not in CISA KEV at last sync

Original advisory: https://aws.amazon.com/security/security-bulletins/rss/2026-058-aws/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-157370.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-15737	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

mediumCVE-2026-15737: AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools f…nvd