CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
highvulnerability
security
Source: AWS Security BulletinsJuly 23, 2026
Summary
A vulnerability (CVE-2026-16796) was found in the AWS Bedrock AgentCore Python SDK's install_packages() method that fails to properly validate package name inputs, allowing an authenticated attacker to run arbitrary commands (code execution) within the sandbox environment where Python packages are installed. This affects versions of bedrock-agentcore before 1.18.1.
Solution / Mitigation
Update bedrock-agentcore to version 1.18.1 or later.
Classification
Attack Type
Other
Attack SophisticationModerate
Impact (CIA+S)
integrityconfidentiality
Affected Vendors
Amazon
Related Issues
Monthly digest — independent AI security research
Original source: https://aws.amazon.com/security/security-bulletins/rss/2026-065-aws/
First tracked: July 23, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 95%