What’s Vulnerable › Products

aws bedrock-agentcore-starter-toolkit vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your aws bedrock-agentcore-starter-toolkit version is affected

Latest aws bedrock-agentcore-starter-toolkit vulnerabilities

• CVE-2026-106032 — Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import (CVSS 5.7)
• CVE-2026-105812 — Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import (CVSS 9.0)