CVE-2026-106032

MediumCVSS 5.7

Published: 06/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Summary

In Amazon Bedrock AgentCore Starter Toolkit before 0.3.14, server-side request forgery in OpenAPI schema processing of the agent import functionality might allow an authenticated remote actor to cause arbitrary outbound requests and read arbitrary local files. Fixed in version 0.3.14; migration to @aws/agentcore is recommended.

Risk Assessment

Risk of unauthorized access to local files and outbound requests in the user's environment, potentially leading to confidentiality and integrity breaches.

Recommendation

Upgrade to version 0.3.14 or, preferably, migrate to @aws/agentcore which does not contain this issue.

Other vulnerabilities in Amazon Bedrock AgentCore Starter Toolkit

CVE-2026-105812Critical
Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values incorporated into generated Python source without safe literal encoding.

Original NVD description (English source)

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrary outbound requests and read arbitrary local files, via crafted external reference values in the OpenAPI content associated with a Bedrock Agent action group. To remediate this issue, users should upgrade to version 0.3.14. Note that bedrock-agentcore-starter-toolkit is deprecated. The @aws/agentcore npm CLI is the supported replacement and does not contain this issue. Migration to @aws/agentcore is the recommended long-term path.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS