CVE-2026-16796
2 advisories.
PyPI/bedrock-agentcore CVE-2026-16796: high 7.3
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
Action: Upgrade bedrock-agentcore to 1.18.1 or later.
pip install bedrock-agentcore==1.18.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18.1 | - |
Fixed versions
| 1.18.1 |
Sources
- osv: GHSA-j6g5-3hh3-pgw8
- https://github.com/aws/bedrock-agentcore-sdk-python/security/advisories/GHSA-j6g5-3hh3-pgw8
- https://nvd.nist.gov/vuln/detail/CVE-2026-16796
- https://github.com/aws/bedrock-agentcore-sdk-python/pull/581
- https://github.com/aws/bedrock-agentcore-sdk-python/commit/3c4b4ee6b8730e6313a82c743ac37dbcc1c21cdb
- https://aws.amazon.com/security/security-bulletins/2026-065-aws
- https://github.com/aws/bedrock-agentcore-sdk-python
- https://pypi.org/project/bedrock-agentcore/1.18.1
CVE-2026-16796 · published · modified · JSON
PyPI/bedrock-agentcore CVE-2026-16796: high 7.3
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
Action: Upgrade bedrock-agentcore to 1.18.1 or later.
pip install bedrock-agentcore==1.18.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18.1 | - |
Fixed versions
| 1.18.1 |
Sources
- osv: PYSEC-2026-3551
- https://github.com/aws/bedrock-agentcore-sdk-python/security/advisories/GHSA-j6g5-3hh3-pgw8
- https://nvd.nist.gov/vuln/detail/CVE-2026-16796
- https://github.com/aws/bedrock-agentcore-sdk-python/pull/581
- https://github.com/aws/bedrock-agentcore-sdk-python/commit/3c4b4ee6b8730e6313a82c743ac37dbcc1c21cdb
- https://aws.amazon.com/security/security-bulletins/2026-065-aws
- https://github.com/aws/bedrock-agentcore-sdk-python
- https://pypi.org/project/bedrock-agentcore/1.18.1
- https://pypi.org/project/bedrock-agentcore
- https://github.com/advisories/GHSA-j6g5-3hh3-pgw8
CVE-2026-16796 · published · modified · JSON