Improper Neutralization Vulnerability in AWS Bedrock AgentCore Python SDK
CVE-2026-16796

8.4HIGH

Key Information:

Vendor

Aws

Status
Bedrock-agentcore 1.18.1
Vendor
CVE Published:
23 July 2026

What is CVE-2026-16796?

The AWS Bedrock AgentCore Python SDK exhibits an improper neutralization issue within the install_packages() method which can potentially allow a remote authenticated user to execute arbitrary commands. This vulnerability arises when crafted package name arguments are processed, leading to security risks within the Code Interpreter sandbox environment. Users are highly urged to upgrade to version 1.18.1 or later to patch this vulnerability and ensure the integrity of their applications.

Affected Version(s)

bedrock-agentcore 1.18.1 0 < 1.18.1

References

https://pypi.org/project/bedrock-agentcore/1.18.1/
release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-0...
vendor-advisory
https://github.com/aws/bedrock-agentcore-sdk-python/secur...
release-notes

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.