bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Friday, October 30, 2026

Amazon Kinesis Producer Library for Java: Credential Exposure Vulnerability

Amazon Kinesis Producer Library for Java versions before 1.0.8 expose AWS credentials through debug logs and process arguments, allowing local users to steal credentials. Affected versions: com.amazonaws:amazon-kinesis-producer ≤ 0.15.12 and software.amazon.kinesis:amazon-kinesis-producer < 1.0.8. Action required: upgrade immediately if you're running these versions, especially if DEBUG logging is enabled.

source: [aws/security-bulletin]