A flaw in the git_utils.py component of the AWS SageMaker Python SDK allows git clone operations that fail to write unredacted command‑line output—including repository credentials—to CloudWatch Logs. The runclone_command() function does not strip credentials from subprocess error output, enabling an authenticated remote user to obtain plaintext repository credentials from the logs. This issue is a classic case of sensitive data leakage (CWE‑532).

AWS versions earlier than 3.10.0 and v2 versions earlier than 2.257.3 are affected. The vulnerability exists on the SDK libraries compiled for AWS SageMaker; any environment using these older SDK releases is at risk.

The CVSS score of 6 indicates moderate severity, and the vulnerability is exploitable by any authenticated remote user able to initiate a git clone that fails. The EPSS score is not available, and the issue is not listed in CISA’s KEV catalog; therefore the current likelihood of exploitation cannot be quantified precisely, but exposure of sensitive credentials poses a significant operational risk if an attacker obtains them.