CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
AWS Lambda ยท 2026-10-01
Actions
Technical Details
| Affected Versions | >=3.6.0, <=3.34.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-104002 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update Powertools for AWS Lambda (Python) to version 3.35.0 to address the fail-open error handling issue in the data masking utility and prevent potential sensitive data leaks.
For Platform Teams
Deploy the patched version of Powertools for AWS Lambda (Python) to ensure data masking errors raise exceptions instead of returning original values, enhancing security posture.
For Executives
Implement the upgrade to Powertools for AWS Lambda (Python) version 3.35.0 to mitigate the security risk of sensitive data exposure due to CVE-2026-104002.
Source
Related AWS Lambda Updates
- AWS Lambda durable functions are now available in AWS European Sovereign Cloud region (2026-09-24)
- AWS Lambda now supports direct read configuration for Amazon S3 Files (2026-09-11)
- AWS Lambda recursive loop detection is now available in Europe Sovereign Cloud (2026-09-10)
- AWS Lambda durable functions integrates with Pydantic AI (2026-09-10)
- AWS Lambda now supports 90-minute function timeout on Lambda Managed Instances (2026-09-09)