PT-2026-64164 · Aws · Bedrock Agentcore Python Sdk

CVE-2026-16796

·

Published

2026-07-23

·

Updated

2026-08-04

CVSS v4.0

8.4

High

VectorAV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions AWS Bedrock AgentCore Python SDK versions prior to 1.18.1
Description Improper neutralization of argument delimiters in the install packages() method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox by providing crafted package name arguments.
Recommendations Upgrade to version 1.18.1.

Exploit

Fix

Argument Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2026-16796
GHSA-J6G5-3HH3-PGW8
PYSEC-2026-3551

Affected Products

Bedrock Agentcore Python Sdk