https://vulnerability.circl.lu/sightings/feed 2026-07-25T17:58:20.780264+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bc586a62-6112-4e1b-87a1-ad999f2a8285/export 2026-07-25T17:58:20.802379+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bc586a62-6112-4e1b-87a1-ad999f2a8285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16796", "type": "seen", "source": "https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382", "content": "# CVE-2026-16796: CVE-2026-16796: Command Argument Injection in AWS Bedrock AgentCore SDK\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-07-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-16796\n\n## Summary\nAn argument injection vulnerability in the AWS Bedrock AgentCore Python SDK allows authenticated users to execute arbitrary commands inside the Code Interpreter sandbox container via crafted Python package specifiers containing shell metacharacters.\n\n## TL;DR\nA weakly validated package extras regex in bedrock-agentcore allows command execution inside the Code Interpreter sandbox via crafted package install requests.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-88\n- **Attack Vector**: Network\n- **CVSS v3.1**: 7.3\n- **EPSS Score**: 0.00327\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- AWS Bedrock AgentCore Python SDK (bedrock-agentcore)\n- **bedrock-agentcore**: >= 1.6.0, < 1.18.1 (Fixed in: `1.18.1`)\n\n## Mitigation\n\n- Upgrade the bedrock-agentcore library to version 1.18.1 or newer.\n- Enforce network egress isolation on the Code Interpreter container execution environment.\n- Validate packages using strict PEP 508 schema structures in upstream application code.\n\n**Remediation Steps:**\n1. Identify all Python deployments containing the bedrock-agentcore dependency.\n2. Update requirements.txt, setup.py, or pyproject.toml to lock bedrock-agentcore to >= 1.18.1.\n3. Re-run dependency resolution pipelines to compile clean lockfiles.\n4. Deploy the updated codebase and verify the validation behavior of the SDK.\n\n## References\n\n- [AWS Security Bulletin - 2026-065](https://aws.amazon.com/security/security-bulletins/2026-065-aws/)\n- [GitHub Security Advisory GHSA-j6g5-3hh3-pgw8](https://github.com/aws/bedrock-agentcore-sdk-python/security/advisories/GHSA-j6g5-3hh3-pgw8)\n- [Pull Request #581: Package verification improvement](https://github.com/aws/bedrock-agentcore-sdk-python/pull/581)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-16796) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-25T02:43:25.275251Z"} 2026-07-25T02:43:25.275251+00:00