Approved changes feed: RSS · Atom

cpe:2.3:a:aws:amazon_bedrock_agentcore_harness:n_a:*:*:*:*:*:*:*

part: a version: n_a update: *

VendorAws (e6707f00-6abb-51df-808c-9e3417305027)
ProductAmazon Bedrock Agentcore Harness (57cddd9a-2781-53c5-b686-27304aa6ed32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18830 vulnerable 2026-09-16 04:34:02.012832 Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
HIGH (8.1)
Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.
Published: 2026-08-04T17:42:20.619Z
Updated: 2026-08-04T18:52:52.795Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.