Bedrock AgentCore Starter Toolkit vulnerabilities

2 known vulnerabilities in Bedrock AgentCore Starter Toolkit from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  bedrock-agentcore-starter-toolkit: Improper Control of Generation of Code

  CVE-2026-105812Oct 6, 2026AWS

  Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, v

• 7.5 High severity

  Bedrock AgentCore Starter Toolkit: Unverified Ownership

  CVE-2026-4269Mar 16, 2026AWS

  A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, leading to code execution in the AgentCore Runtime. This issue only affects users of the Bedro