CVE-2026-106032

Vendor

Amazon Web Services

Product

AWS services

CVSS

5.7

EPSS

0.003 (p21)

Exposure class

Cloud platform, Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   AWS bulletin AWS 25d ago

   CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF

   Bulletin ID: 2026-127-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/06/2026 13:30 PM PDT Description: bedrock-agentcore-starter-toolkit is an AWS-maintained open-source Python package…

   CVE-2026-105812CVE-2026-106032 Amazon Web Services
2. 13
   CVE NVD 25d ago

   Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before…

   Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause…

   CVSS 5.7 Fix available CVE-2026-106032 Amazon Web Services