CVE-2026-16796

HIGH 7.3

Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, users should upgrade to the patched version 1.18.1.

CWE	CWE-88
Vendor	aws
Product	bedrock-agentcore 1.18.1
Published	Jul 23, 2026
Last Updated	Jul 23, 2026

Stay Ahead of the Next One

Get instant alerts for aws bedrock-agentcore 1.18.1

Be the first to know when new high vulnerabilities affecting aws bedrock-agentcore 1.18.1 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

AWS / bedrock-agentcore 1.18.1

0 < 1.18.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

pypi.org: https://pypi.org/project/bedrock-agentcore/1.18.1/ aws.amazon.com: https://aws.amazon.com/security/security-bulletins/2026-065-aws/ github.com: https://github.com/aws/bedrock-agentcore-sdk-python/security/advisories/GHSA-j6g5-3hh3-pgw8

Credits

BeyondTrust Phantom Labs