AWS Bedrock AgentCore Python SDK vulnerabilities
3 known CVE vulnerabilities in AWS Bedrock AgentCore Python SDK, translated and rated.
- CVE-2026-16796High
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.
- CVE-2026-15737Medium
A vulnerability in AWS Bedrock AgentCore Python SDK versions 1.4.8 and 1.5.0 causes unintended logging of sensitive user content to CloudWatch Logs. The SDK writes raw user prompts and agent responses as OpenTelemetry span attributes without filtering or masking.
- CVE-2026-12530High
The install_packages() method in AWS Bedrock AgentCore Python SDK versions >= 1.1.3 and < 1.6.1 has improper neutralization of argument delimiters, which may allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.