{"vulnerability": "CVE-2026-1139", "sightings": [{"uuid": "a9638e99-0de3-4986-a9fe-79e1705cefe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1139", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcqxtl5vjg2i", "content": "", "creation_timestamp": "2026-01-19T06:03:29.116225Z"}, {"uuid": "7814ff93-02a2-4b15-a9b6-614654822f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcr3ixplwd27", "content": "", "creation_timestamp": "2026-01-19T07:09:06.947686Z"}, {"uuid": "a39548ac-8ab7-4d2b-8299-ae0c83a44699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11393", "type": "seen", "source": "https://gist.github.com/alon710/7771115a3d9e03361e58ecd1b540d28d", "content": "# CVE-2026-11393: CVE-2026-11393: Code Injection via Improper Triple-Quote Escaping in AWS AgentCore CLI\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11393\n\n## Summary\nA critical code injection vulnerability exists in @aws/agentcore CLI (AWS AgentCore CLI) during the Bedrock Agent import lifecycle. An authenticated remote attacker with permissions to configure Bedrock collaborator attributes can inject python code by embedding triple-double-quotes (\"\"\") inside the collaborationInstruction metadata field. The CLI formats this metadata directly into a Python docstring in a generated main.py file without adequate escaping, leading to arbitrary code execution when the imported agent is run or deployed.\n\n## TL;DR\nImproper validation of triple-double-quotes in AWS AgentCore CLI's Bedrock Agent import allows remote code execution when local or cloud environments execute generated code.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network (Low Privileges Required)\n- **CVSS v3.1**: 9.0 (Critical)\n- **EPSS Score**: 0.00322\n- **Impact**: Arbitrary Code Execution\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @aws/agentcore CLI\n- Amazon Bedrock Agent Import Lifecycle\n- **@aws/agentcore (Stable)**: >= 0.4.0 to <= 0.14.1 (Fixed in: `0.14.2`)\n- **@aws/agentcore (Preview)**: >= 0.3.0-preview.7.0 to <= 1.0.0-preview.8 (Fixed in: `1.0.0-preview.9`)\n\n## Mitigation\n\n- Upgrade `@aws/agentcore` to version 0.14.2 (stable) or 1.0.0-preview.9 (preview)\n- Restrict IAM permissions for Bedrock Agent configuration updates\n- Perform code reviews of generated `main.py` files prior to execution\n\n**Remediation Steps:**\n1. Identify active installations of @aws/agentcore CLI\n2. Execute 'npm install -g @aws/agentcore@0.14.2' or upgrade the local package dependency\n3. Scan local python files for unescaped triple quotes inside 'collaboratorInstruction'\n4. Audit CloudTrail logs for bedrock-agent:UpdateAgentCollaborator events\n\n## References\n\n- [https://aws.amazon.com/security/security-bulletins/2026-040-aws/](https://aws.amazon.com/security/security-bulletins/2026-040-aws/)\n- [https://github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7](https://github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-11393](https://nvd.nist.gov/vuln/detail/CVE-2026-11393)\n- [https://www.cve.org/CVERecord?id=CVE-2026-11393](https://www.cve.org/CVERecord?id=CVE-2026-11393)\n- [https://github.com/aws/agentcore-cli/pull/1329](https://github.com/aws/agentcore-cli/pull/1329)\n- [https://github.com/aws/agentcore-cli/commit/ae1b932ec91bacdbb7a3521f9f1fc24479a3d504](https://github.com/aws/agentcore-cli/commit/ae1b932ec91bacdbb7a3521f9f1fc24479a3d504)\n- [https://github.com/aws/agentcore-cli/releases/tag/v0.14.2](https://github.com/aws/agentcore-cli/releases/tag/v0.14.2)\n- [https://www.npmjs.com/package/@aws/agentcore/v/0.14.2](https://www.npmjs.com/package/@aws/agentcore/v/0.14.2)\n- [https://www.npmjs.com/package/@aws/agentcore/v/1.0.0-preview.9](https://www.npmjs.com/package/@aws/agentcore/v/1.0.0-preview.9)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11393) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T09:32:05.245981Z"}, {"uuid": "593284b2-0067-403a-9831-f3024dd7a21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnsgig75ae2a", "content": "CVE-2026-11393 - Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import\nCVE ID : CVE-2026-11393\n \n Published : June 8, 2026, 6:38 p.m. | 37\u00a0minutes ago\n \n Description : Improper neutralization of triple-quote characters during Python code gener...", "creation_timestamp": "2026-06-08T19:35:27.431869Z"}, {"uuid": "0e3fbfa7-1e56-414d-bfdc-09ad764fc525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnshvnuq3g2y", "content": "\ud83d\udd34 CVE-2026-11393 - Critical (9)\n\nImproper neutralization of triple-quote characters during Python code generation in AgentCore CLI...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-08T20:02:37.083067Z"}, {"uuid": "221f5eea-d229-4163-8b0d-613968026e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokdzxb6bl2z", "content": "CVE-2026-11395 - CF7 to Webhook\nCVE ID : CVE-2026-11395\n \n Published : June 18, 2026, 6:50 a.m. | 52\u00a0minutes ago\n \n Description : The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.0 via the pull_the_t...", "creation_timestamp": "2026-06-18T07:55:28.158355Z"}, {"uuid": "370127c6-b3f6-4534-ae00-4c52a7f4fb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mppv7esftr2w", "content": "CVE-2026-11397 - WP Import Export Lite\nCVE ID : CVE-2026-11397\n \n Published : July 3, 2026, 4:30 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.3...", "creation_timestamp": "2026-07-03T06:11:13.992462Z"}, {"uuid": "50e216f2-ec14-4452-9153-355166919d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqcdlwd2t2n", "content": "CVE-2026-11398 - LatePoint\nCVE ID : CVE-2026-11398\n \n Published : July 3, 2026, 7:53 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The LatePoint \u2013 Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to authorization bypass in all versions up...", "creation_timestamp": "2026-07-03T10:06:20.860834Z"}, {"uuid": "31154adb-482f-4f15-aba6-da278dbe5258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11397", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpqwyyq3yp2k", "content": "CVE-2026-11397 wp-import-export-lite (CVSS Score 5.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T16:16:07.430920Z"}, {"uuid": "e8a7be40-9bec-4cab-9c85-30cc22b18341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11397", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprgiwu7jp2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11397 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Import Export Lite: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress\n\n\n\nhttps://kripta.biz/posts/310DEDFA-3842-4F84-9F4C-E698CA593D6B", "creation_timestamp": "2026-07-03T20:53:28.178178Z"}, {"uuid": "6b3b2b03-3871-4b1d-a972-fc0fc99dc091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11398", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprnl4atjl23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11398 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LatePoint: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/EE1C47F7-AD40-468E-831E-9E3066A51A01", "creation_timestamp": "2026-07-03T22:59:57.201503Z"}, {"uuid": "127bc97a-b45e-43e8-9528-a309d6d4de4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11398", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mprrtcfuay2z", "content": "CVE-2026-11398 latepoint (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-04T00:16:07.199900Z"}, {"uuid": "aaaf93ae-e0ce-4dfd-9783-d1a7eeee7707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11392", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgn4q6ib2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11392 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Hotel Booking: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/955E108F-2437-4643-9155-51B9DBD107C2", "creation_timestamp": "2026-07-10T05:38:24.505062Z"}, {"uuid": "5ffe24b7-2e04-4ff6-8491-63f7ccc6261f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11392", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqbgniwg4v2k", "content": "WordPress\u63d2\u4ef6WP Hotel Booking\u5b58\u5728\u53cd\u5c04\u578b\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e(CVE-2026-11392)\u6df1\u5ea6\u5206\u6790\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/76C67637-6827-45EE-8B53-02B44F43C8DD", "creation_timestamp": "2026-07-10T05:38:37.368488Z"}, {"uuid": "26bd4b53-b7eb-42b9-83f4-3cffa2dc294d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqline2oyb2x", "content": "CVE-2026-11390 - News Kit Addons For Elementor\nCVE ID : CVE-2026-11390\n \n Published : July 14, 2026, 2:16 a.m. | 2\u00a0hours, 58\u00a0minutes ago\n \n Description : The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Site Logo Title and...", "creation_timestamp": "2026-07-14T05:40:57.014693Z"}, {"uuid": "2124b2ff-3ae2-424a-bf81-ec49d33fa361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11390", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzla3x53e2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11390 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 News Kit Addons For Elementor: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F8C34680-8CF1-4B13-9D06-F62BDC3ACA0D", "creation_timestamp": "2026-07-19T20:04:29.858365Z"}, {"uuid": "14a408fb-0610-4dc9-94c1-cdbfeae3ce76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11393", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsezplhpr24", "content": "CVE-2026-11393 - agentcore\nA security issue exists in the AgentCore CLI before version 0.14.2. An attacker with access to your AWS account could potentially execute unauthorized code on your system if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#agentcore #aws #npm #CVE #infosec", "creation_timestamp": "2026-07-29T16:50:06.404566Z"}]}