AWS Bedrock AgentCore SDK Sensitive Content Disclosure via OpenTelemetry (CVE-2024-15737)

Vulnerability Overview Title: Sensitive content disclosure via OpenTelemetry spans in bedrock-agentcore-sdk-python Description: Summary: The Bedrock AgentCore Python SDK ( ) is an open-source Python library providing client tools for building AI agents on the Amazon Bedrock AgentCore platform. A vulnerability exists where, in certain scenarios, the SDK's OpenTelemetry instrumentation writes raw user prompts and full agent responses to span attributes, potentially leaking sensitive content to principals in AWS CloudWatch log groups. Impact: With each agent invocation, OpenTelemetry instrumentation records the raw user prompt and the complete agent response as OpenTelemetry span attributes without any filtering or masking. These spans are exported to the customer's AWS CloudWatch log groups. Consequently, local authorized users with access to CloudWatch Logs may access potentially sensitive user content. Any deployment running an affected version that generates spans containing sensitive data is impacted. Affected Versions Affected Versions: 1.4.8, 1.5.0 Fixed Versions: >= 1.5.1 Remediation Patch: This issue has been resolved in Bedrock AgentCore Python SDK version 1.5.1. It is recommended to upgrade to the latest version and ensure that any forks or derived code have been patched to include this fix. Users of affected versions should also review and purge potentially sensitive content from their AWS CloudWatch log groups. Workaround: No workaround is available. It is recommended to upgrade to Bedrock AgentCore Python SDK version 1.5.1 or higher. References If you have any questions or comments, please contact the [AWS/Amazon] Security Team via the Vulnerability Reporting Page or directly by email at . Do not create public GitHub issues. Additional Information CVSS v3 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: Required - Scope: Unchanged - Confidentiality: High - Integrity: None - Availability: None CVE ID: CVE-2024-15737 Weakness: No CWEs identified --- Code Snippet No POC code or exploit code was included in the page.

Goal Reached Thanks to every supporter — we hit 100%!

AWS Bedrock AgentCore SDK Sensitive Content Disclosure via OpenTelemetry (CVE-2024-15737)

More from this source