Skip to content
OpenAdvisories

Package · PyPI

bedrock-agentcore

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.3
    CVE-2026-16796

    Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

    Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package nam…

    AWS bedrock-agentcore 1.18.1 bedrock-agentcore PyPI
  • High 7.3
    CVE-2026-12530

    Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

    Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via cra…

    AWS bedrock-agentcore bedrock-agentcore PyPI