Bulletin ID: 2026-123-AWSScope: AWSContent Type: Important (requires attention)Publication Date: 10/01/2026 14:00 PM PDTDescription:Powertools for AWS Lambda (Python) is a developer toolkit that implements serverless best practices and increases developer velocity. We identified CVE-2026-104002, a fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python). This issue might allow actors to read sensitive field values that the application intended to mask.Impacted versions: >=3.6.0 AND <=3.34.0Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.