What’s Vulnerable › Vulnerabilities

CVE-2026-16796: Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-23 · updated 2026-10-24
• Weakness: CWE-88

Description

Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, users should upgrade to the patched version 1.18.1.

Affected products

• AWS bedrock-agentcore 1.18.1: before 1.18.1 — fixed in 1.18.1

How to fix

Upgrade to a fixed version: AWS bedrock-agentcore 1.18.1 1.18.1. Check the vendor advisory for mitigations.

References

• https://aws.amazon.com/security/security-bulletins/2026-065-aws/
• https://github.com/aws/bedrock-agentcore-sdk-python/security/advisories/GHSA-j6g5-3hh3-pgw8
• https://pypi.org/project/bedrock-agentcore/1.18.1/

Get alerted when CVE-2026-16796 or the next vulnerability affects your stack