Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-104002 EUVD-2026-91063

Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

Published Oct 1, 2026 · Updated Oct 9, 2026 · Assigned by AMZN

Description

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. 

To remediate this issue, users should upgrade to version 3.35.0.

Affected products

VendorProductAffectedFixed
AWS powertools-lambda-python 3.6.0 – ≤ 3.34.0 —

References