What is 2026-123-AWS?

2026-123-AWS is a security advisory published by AWS Security Bulletins with High severity. CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

Which CVE IDs does 2026-123-AWS cover?

2026-123-AWS covers the following CVE IDs: CVE-2026-104002. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-123-AWSHigh

CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

Vendor

AWS Security Bulletins

Published

October 1, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-104002 →

📋 Description

Bulletin ID: 2026-123-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 14:00 PM PDT Description: Powertools for AWS Lambda (Python) is a developer toolkit that implements serverless best practices and increases developer velocity. We identified CVE-2026-104002, a fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python). This issue might allow actors to read sensitive field values that the application intended to mask. Impacted versions: >=3.6.0 AND Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-123-aws/