CVE-2026-167968.4HighCWE-88
CVE-2026-16796: AWS bedrock-agentcore 1.18.1 vulnerability
AWS · bedrock-agentcore 1.18.1
Fixed in 1.18.1 · Affected: AWS bedrock-agentcore 1.18.1 before 1.18.1 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.7%probability of exploitation in the next 30 days
54th percentile
050100
Higher than 54% of scored CVEs
8.4HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, users should upgrade to the patched version 1.18.1.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
Coverage1 article · 1 outlet
First in our coverage: Infosecurity, 29 Sep.
- Amazon Bedrock SDK Flaws Expose AWS Credentials to Sandbox AttacksInfosecurity · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.