bedrock-agentcore-starter-toolkit vulnerabilities
CVEs whose affected-version data names the bedrock-agentcore-starter-toolkit package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-106032Medium· 5.7Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the envir…
Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the envir…
CVE-2026-105812Critical· 9.0Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or dep…
Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or dep…
CVE-2026-4269High· 7.5Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit
Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit