CVE-2026-16796: AWS Bedrock AgentCore SDK install_packages() Remote Command Execution via Unsanitized Argument Separator

aws.amazon.com 2026-07-24查看中文 →

Security AdvisoryCVE-2026-16796UnknownAWS

Affected:

bedrock-agentcore < 1.18.1

Fixed in:

bedrock-agentcore 1.18.1

Referenced CVEs: CVE-2026-16796 · 7.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from aws.amazon.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Strands Agents Tools http_request Unauthorized Access Vulnerability CVE-2026-18394 Advisory 2026-08-01 CVE-2026-18481: Stored XSS in AWS Ops Wheel Participant URL Field Leads to Account Takeover 2026-08-01

Offline Archive

Offline screenshot & PDF are Pro-exclusive