CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell
Local attackers can recover cleartext AWS console passwords from logs in AWS Tools for PowerShell, requiring an upgrade to fix.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-107783?
CVE-2026-107783 is a medium-severity vulnerability in aws-tools-for-powershell, published on 9 Oct 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts.
To remediate this issue, users should upgrade to version 5.0.306 or later. After upgrading, review PowerShell transcripts and log stores for previously disclosed passwords and rotate any affected IAM console passwords.
Weakness: CWE-532
Which versions are affected by CVE-2026-107783?
How do I fix CVE-2026-107783?
No fix has been published for CVE-2026-107783 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-107783 being exploited?
There is no known exploitation of CVE-2026-107783 in the wild and no public exploit code.
Sources
Also known as GHSA-q3x5-q6rm-c7p3.