Executive brief
AWS AgentCore Python SDK is a library used to build AI agent applications on the AWS platform. A vulnerability in OpenTelemetry span handling can cause sensitive information to be inadvertently exposed in observability and logging systems. This could expose API keys, credentials, or other confidential data processed by the agent application to unauthorized access.
Technical details
This vulnerability exists in the AWS AgentCore Python SDK's OpenTelemetry span instrumentation, where sensitive information such as API keys, credentials, or confidential request/response data is not properly sanitized before being recorded in telemetry spans. The root cause is inadequate data filtering or redaction in the span collection and export pipeline. An attacker with access to observability systems (logs, traces, metrics), monitoring dashboards, or telemetry backends could retrieve this exposed sensitive data. The vulnerability does not require authentication or user interaction—any agent application using the affected SDK versions will automatically expose data through normal operation. AWS has published a security bulletin and likely provided patched versions of the SDK; users should update to the latest version to remediate this issue.
Affected products
- AWS AgentCore Python SDK
Timeline
- 2026-09-22: disclosed
- 2026-09-22: advisory