CVE-2026-105812: CWE-94: Improper Control of Generation of Code ('Code Injection') in aws bedrock-agentcore-starter-toolkit

The vulnerability identified as CVE-2026-105812 in the AWS bedrock-agentcore-starter-toolkit involves improper control of code generation (CWE-94), leading to potential code injection. This toolkit is used to import Amazon Bedrock Agents locally. When a maliciously crafted agent is imported and executed, it could trigger arbitrary code execution. The affected versions are from 0.1.4 up to and including 0.3.13. AWS has acknowledged the issue and provided a security bulletin with remediation guidance. The CVSS 4.0 score is 8.8, indicating high severity, with network attack vector, low attack complexity, partial privileges required, user interaction needed, and high impacts on confidentiality, integrity, availability, and security controls.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the local environment where the bedrock-agentcore-starter-toolkit is used to import and run agents. This could compromise the confidentiality, integrity, and availability of the affected system and potentially lead to further system compromise or data loss.

AWS has published an official security bulletin indicating that a patch is available for this vulnerability. Users should update the bedrock-agentcore-starter-toolkit to a version later than 0.3.13 where the issue is fixed. Refer to the AWS security bulletin at https://aws.amazon.com/security/security-bulletins/2026-127-aws/ for the latest remediation details and apply the official fix promptly.