{"data":{"id":"511c78c1-199c-4ef1-82e3-0b6acb2e797c","title":"CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()","summary":"A vulnerability (CVE-2026-16796) was found in the AWS Bedrock AgentCore Python SDK's install_packages() method that fails to properly validate package name inputs, allowing an authenticated attacker to run arbitrary commands (code execution) within the sandbox environment where Python packages are installed. This affects versions of bedrock-agentcore before 1.18.1.","solution":"Update bedrock-agentcore to version 1.18.1 or later.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-065-aws/","publishedAt":"2026-07-23T20:14:18.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS","AWS Bedrock","bedrock-agentcore"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-23T20:14:18.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}