Skip to content
OpenAdvisories

Product · AWS

Amazon Bedrock AgentCore harness

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-18830 Public exploit

    Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API

    Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this…

    AWS Amazon Bedrock AgentCore harness