AWS Bedrock Agentcore 1.18.1 vulnerabilities

1 vulnerability

Known vulnerabilities in AWS Bedrock Agentcore 1.18.1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4CVE-2026-16796awsbedrock-agentcore 1.18.1+1
EPSS score
0.73%
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, users should upgrade to the patched version 1.18.1.