CVE-2026-12530
Awaiting Analysis
Awaiting Analysis - Queue
Improper Argument Delimiter Handling in AWS Bedrock AgentCore SDK
Vulnerability report for CVE-2026-12530, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-06-17
Last updated on: 2026-06-22
Assigner: AMZN
Description
Description
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.
To mitigate this issue, users should upgrade to version 1.6.1.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| aws | bedrock_agentcore_python_sdk | From 1.1.3 (inc) to 1.6.1 (exc) |
| aws | bedrock_agentcore_python_sdk | 1.6.1 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-88 | The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string. |
