AWS Access Key exposed in configuration file
An AWS access key ID and secret access key were found hardcoded in the application configuration.
CWE
CWE-798
CVE
N/A
OWASP
N/A
CVSS Score
9.1
Source
Secrets
Category
Hardcoded Secret
Exploitability
Exploitable
Detected
2026-05-30 19:02
Code Location
src/config/aws-config.json:8"AccessKeyId": "AKIA3EXAMPLE7MZPHN2Q"
AI Explanation
This finding was detected by automated scanning. Use the Security Copilot for a detailed AI-powered explanation of this vulnerability, including attack vectors and business impact analysis.
Remediation Suggestion
Rotate the AWS credentials immediately. Use AWS Secrets Manager or environment variables instead.
Related Findings
| Severity | Title | CWE | Status |
|---|---|---|---|
High |
Stripe API key found in JavaScript bundle | CWE-798 | Open |
Change Status