CVE-2026-12530: Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
AWS · bedrock-agentcore
Vendor fix available · Affected: AWS bedrock-agentcore · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
Higher than 28% of scored CVEs
DescriptionNVD
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, users should upgrade to version 1.6.1.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- AWS
- Published
- June 2026
- Bounty reports
- 1 disclosed on HackerOne
Disclosed bug bounty reports about CVE-2026-12530
The reports on HackerOne that name this CVE, with HackerOne's own outcome. Titles and metadata only.
- Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip FlagsAWS VDP · 2026 · high severityValid
Coverage1 article · 1 outlet
First in our coverage: Infosecurity, 29 Sep.
- Amazon Bedrock SDK Flaws Expose AWS Credentials to Sandbox AttacksInfosecurity · first in our coverage
New articles also arrive in the RSS feed.