{"data":{"id":"6eeab884-f663-4ffe-a5b4-357551d404a8","title":"CVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Import","summary":"CVE-2026-11393 is a code injection flaw in the AWS AgentCore CLI (@aws/agentcore) affecting versions >= 0.4.0 through <= 0.14.1 and preview versions >= 0.3.0-preview.7.0 through <= 1.0.0-preview.8. The collaborationInstruction field of a Bedrock Agent collaborator association is interpolated into a triple-quoted Python docstring using single-quote escaping, so a value containing \"\"\" breaks out of the docstring in the main.py generated by \"agentcore add agent --type import\". An authenticated user in the same AWS account with bedrock:AssociateAgentCollaborator permission can exploit this, and the injected code runs with the credentials of the context where the generated file is executed, via agentcore dev or agentcore deploy followed by agentcore invoke.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-040-aws/","publishedAt":"2026-06-08T18:54:30.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS AgentCore CLI","Amazon Bedrock","Amazon Bedrock AgentCore","Bedrock Agent"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-06-08T18:54:30.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}