Medium severity5.5NVD Advisory· Published Mar 21, 2025· Updated Jun 17, 2026
CVE-2025-2598
CVE-2025-2598
Description
When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this issue, users should upgrade to version 2.178.2 or later and ensure any forked or derivative code is patched to incorporate the new fixes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
aws-cdknpm | >= 2.172.0, < 2.178.2 | 2.178.2 |
cdknpm | >= 2.172.0, < 2.178.2 | 2.178.2 |
Affected products
4- cpe:2.3:a:amazon:aws_cloud_development_kit:*:*:*:*:*:*:*:*Range: >=2.172.0,<2.178.2
- ghsa-coords2 versions
>= 2.172.0, < 2.178.2+ 1 more
- (no CPE)range: >= 2.172.0, < 2.178.2
- (no CPE)range: >= 2.172.0, < 2.178.2
- AWS/Cloud Development Kit Command Line Interfacev5Range: 2.172.0
Patches
Vulnerability mechanics
References
6- aws.amazon.com/security/security-bulletins/AWS-2025-005/nvdVendor Advisory
- github.com/advisories/GHSA-v63m-x9r9-8gqpghsaADVISORY
- github.com/aws/aws-cdk/security/advisories/GHSA-v63m-x9r9-8gqpnvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2025-2598ghsaADVISORY
- aws.amazon.com/security/security-bulletins/AWS-2025-005ghsaWEB
- github.com/aws/aws-cdk/releases/tag/v2.178.2nvdWEB
News mentions
0No linked articles in our index yet.