CVE-2026-105812

Vendor

Amazon Web Services

Product

AWS services

CVSS

9.0

EPSS

0.003 (p21)

Exposure class

Cloud platform, Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 34
   CVE NVD 25d ago

   Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an…

   Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and…

   CVSS 9.0 Fix available CVE-2026-105812 Amazon Web Services
2. 25
   AWS bulletin AWS 25d ago

   CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF

   Bulletin ID: 2026-127-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/06/2026 13:30 PM PDT Description: bedrock-agentcore-starter-toolkit is an AWS-maintained open-source Python package…

   CVE-2026-105812CVE-2026-106032 Amazon Web Services