How severe is CVE-2026-104002?

CVE-2026-104002 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2026-104002 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (21st percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2026-104002?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2026-104002 published?

CVE-2026-104002 was published on 2026-10-01 and last updated on 2026-10-02.

CVE-2026-104002

CVE-2026-104002 is a medium-severity vulnerability with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-390.

Key facts

Severity: Medium (CVSS 3.x base score 5.3)
CVSS v4: 6.0
EPSS exploit prediction: 0% (21st percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-390
Published: 2026-10-01
Last modified: 2026-10-02

Description

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0.

Frequently asked questions

What is CVE-2026-104002?: A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0.
How severe is CVE-2026-104002?: CVE-2026-104002 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2026-104002 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (21st percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2026-104002?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2026-104002 published?: CVE-2026-104002 was published on 2026-10-01 and last updated on 2026-10-02.

References

Other CWE-390 vulnerabilities

CVE-2026-104480 — Critical (CVSS 9.4): Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an…
CVE-2026-53434 — Critical (CVSS 9.1): Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based…
CVE-2026-76642 — High (CVSS 7.8): util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks,…
CVE-2025-46367 — High (CVSS 7.8): Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without…
CVE-2024-27919 — High (CVSS 7.5): Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol…
CVE-2025-26465 — Medium (CVSS 6.8): A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be…

Browse all CWE-390 vulnerabilities →