Vulnerabilidades do AWS Bedrock-agentcore 1.18.1
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam AWS Bedrock-agentcore 1.18.1: 1 registro(s), com versões afetadas e correções.
CVE-2026-16796
Alta · 7.3
CWE-88 23/07/2026
Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.
To mitigate this issue, users should upgrade to the patched version 1.18.1.