Bedrock Agentcore 1.18.1
Approved changes feed: RSS · Atom
cpe:2.3:a:aws:bedrock-agentcore_1.18.1:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aws (e6707f00-6abb-51df-808c-9e3417305027) |
|---|---|
| Product | Bedrock Agentcore 1.18.1 (619439f8-983a-5872-a323-81d40f2841b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16796 |
vulnerable | 2026-07-29 00:26:18.802373 |
Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
HIGH (7.3)
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.
To mitigate this issue, users should upgrade to the patched version 1.18.1.
Published: 2026-07-23T20:06:32.908Z
Updated: 2026-07-24T13:34:19.993Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.