P4Verified

CVE-2026-107783: aws-tools-for-powershell 0 through 5.0.305

CVE-2026-107783. CVSS 3.1 base score 5.9 (MEDIUM, Source advisory).

Affected technology

aws-tools-for-powershell · 0 through 5.0.305
AWS

Description’s affected range: before 5.0.306 might

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Local · Low privileges required · Passive user interaction

What an attacker can do

Local users might recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. Source advisory’s CVSS 4.0 assessment (base score 6.7/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 2026-10-09 21:09:39.414060+00:00

CWE: CWE-532
CCR priority: 23.6 /100 (P4)
CVSS 3.1: 5.9 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N · Source advisory
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-09 21:08:49.498434+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-107783.html