CVE-2026-119117

Vendor

AWS

Product

amazon-kinesis-producer

CVSS v3.1

6.5 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness

CWE-214, CWE-532

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   AWS bulletin AWS 38h ago

   CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

   Bulletin ID: 2026-159-AWS Publication Date: 10/30/2026 11:00 AM PDT Description: We published CVE-2026-119117. Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the…

   CVE-2026-119117 Amazon Web Services
2. 19
   CVE NVD 37h ago

   Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured…

   Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that…

   CVSS 6.5 Fix available CVE-2026-119117 AWS