CVE-2026-11393: CWE-94: Improper Control of Generation of Code ('Code Injection') in AWS AgentCore CLI
CVE-2026-11393 is a critical code injection vulnerability in AWS AgentCore CLI versions before 0.14.2. It involves improper neutralization of triple-quote characters during Python code generation, which can allow an authenticated remote attacker to execute arbitrary code under the imported agent's IAM execution role and on another user's local environment within the same AWS account. The issue is remediated by upgrading to version 0.14.2.
AI Analysis
Technical Summary
This vulnerability (CWE-94) in AWS AgentCore CLI prior to version 0.14.2 arises from improper handling of triple-quote characters in Python code generation. An authenticated remote attacker can craft a malicious collaborationInstruction stored on a Bedrock Agent collaborator. When another user imports this agent, the malicious code executes with the imported agent's IAM execution role and on the local environment of that user within the same AWS account. This allows arbitrary code execution with potentially high privileges. AWS has released version 0.14.2 to address this issue.
Potential Impact
Successful exploitation allows an authenticated remote attacker to execute arbitrary code on AWS AgentCore Runtime with the imported agent's IAM execution role and on the local environment of another user in the same AWS account. This can lead to complete compromise of the affected environment, including confidentiality, integrity, and availability impacts as indicated by the CVSS score of 9.0 (critical).
Mitigation Recommendations
A patch is available. Users should upgrade AWS AgentCore CLI to version 0.14.2 to remediate this vulnerability. Since this is a cloud service, AWS manages remediation for the cloud-hosted components, but users must update their local CLI installations accordingly. Refer to the AWS security advisory at https://aws.amazon.com/security/security-bulletins/2026-040-aws/ for official guidance.
CVE-2026-11393: CWE-94: Improper Control of Generation of Code ('Code Injection') in AWS AgentCore CLI
Description
CVE-2026-11393 is a critical code injection vulnerability in AWS AgentCore CLI versions before 0.14.2. It involves improper neutralization of triple-quote characters during Python code generation, which can allow an authenticated remote attacker to execute arbitrary code under the imported agent's IAM execution role and on another user's local environment within the same AWS account. The issue is remediated by upgrading to version 0.14.2.
CVSS v3.1
Score 9.0critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-94) in AWS AgentCore CLI prior to version 0.14.2 arises from improper handling of triple-quote characters in Python code generation. An authenticated remote attacker can craft a malicious collaborationInstruction stored on a Bedrock Agent collaborator. When another user imports this agent, the malicious code executes with the imported agent's IAM execution role and on the local environment of that user within the same AWS account. This allows arbitrary code execution with potentially high privileges. AWS has released version 0.14.2 to address this issue.
Potential Impact
Successful exploitation allows an authenticated remote attacker to execute arbitrary code on AWS AgentCore Runtime with the imported agent's IAM execution role and on the local environment of another user in the same AWS account. This can lead to complete compromise of the affected environment, including confidentiality, integrity, and availability impacts as indicated by the CVSS score of 9.0 (critical).
Mitigation Recommendations
A patch is available. Users should upgrade AWS AgentCore CLI to version 0.14.2 to remediate this vulnerability. Since this is a cloud service, AWS manages remediation for the cloud-hosted components, but users must update their local CLI installations accordingly. Refer to the AWS security advisory at https://aws.amazon.com/security/security-bulletins/2026-040-aws/ for official guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- AMZN
- Date Reserved
- 2026-06-05T16:15:22.377Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
- Vendor Advisory Urls
- [{"url":"https://aws.amazon.com/security/security-bulletins/2026-040-aws/","vendor":"AWS"}]
Threat ID: 6a27120ce29bf47b5072ecb6
Added to database: 06/08/2026, 19:03:40 UTC
Last enriched: 07/30/2026, 07:21:34 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 150
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.