CVE-2026-106032

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: AMZN

Description

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrary outbound requests and read arbitrary local files, via crafted external reference values in the OpenAPI content associated with a Bedrock Agent action group. To remediate this issue, users should upgrade to version 0.3.14. Note that bedrock-agentcore-starter-toolkit is deprecated. The @aws/agentcore npm CLI is the supported replacement and does not contain this issue. Migration to @aws/agentcore is the recommended long-term path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106032

Affected Vendors & Products

Vendor	Product	Version / Range
aws	bedrock-agentcore-starter-toolkit	0.1.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This is a server-side request forgery (SSRF) vulnerability in Amazon Bedrock AgentCore Starter Toolkit versions before 0.3.14. It allows an authenticated remote attacker within the same AWS account to trick the system into making arbitrary outbound requests and reading local files by exploiting crafted external reference values in OpenAPI content during Bedrock Agent import.

Detection Guidance

This vulnerability involves server-side request forgery in Amazon Bedrock AgentCore Starter Toolkit. Detection requires checking for unusual outbound requests or unauthorized file access during OpenAPI schema processing. Review logs for unexpected network activity from the toolkit and inspect file access patterns. No specific commands are provided in the context.

Impact Analysis

An attacker could use this to access internal AWS resources, exfiltrate sensitive data, or interact with other systems in your environment. This could lead to data breaches, unauthorized actions, or further compromise of your infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, which may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations could face compliance violations, fines, or reputational damage if exploited.

Mitigation Strategies

Upgrade to version 0.3.14 of bedrock-agentcore-starter-toolkit or migrate to the supported @aws/agentcore npm CLI as the deprecated toolkit is no longer maintained.

Hi! I’m here to help you understand CVE-2026-106032. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70