Threats affecting pkg:pypi/bedrock-agentcore

Bulletin ID: 2026-065-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/23/2026 13:00 PM PDT Description: The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. We identified CVE-2026-16796, an improper neutralization of argument delimiters in the install_packages() method that might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. Impacted versions: bedrock-agentcore version <1.18.1 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

CVE-2026-12530 is a high-severity vulnerability in AWS Bedrock AgentCore Python SDK versions from 1.1.3 up to but not including 1.6.1. It involves improper neutralization of argument delimiters in the install_packages() method, which could allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox by crafting malicious package name arguments. AWS has released version 1.6.1 to address this issue.