CVE-2026-11393
Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import
CVSS Score
9.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2 might allow an authenticated remote threat actor to execute arbitrary code on AWS AgentCore Runtime under the imported agent's IAM execution role and on the local environment of another user in the same AWS account, via a crafted collaborationInstruction stored on a Bedrock Agent collaborator and later processed by that other user during agent import. To remediate this issue, users should upgrade to version 0.14.2.
| CWE | CWE-94 |
| Vendor | aws |
| Product | agentcore cli |
| Published | Jun 8, 2026 |
| Last Updated | Jun 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for aws agentcore cli
Be the first to know when new critical vulnerabilities affecting aws agentcore cli are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
AWS / AgentCore CLI
0.4.0 ≤ 0.14.1 0.3.0-preview.7.0 ≤ 1.0.0-preview.8
References
github.com: https://github.com/aws/agentcore-cli/releases/tag/v0.14.2 npmjs.com: https://www.npmjs.com/package/@aws/agentcore/v/0.14.2 npmjs.com: https://www.npmjs.com/package/@aws/agentcore/v/1.0.0-preview.9 aws.amazon.com: https://aws.amazon.com/security/security-bulletins/2026-040-aws/ github.com: https://github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7