CVE-2026-16796

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-16796
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16796.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-16796
Aliases
Published
2026-07-23T20:06:32.908Z
Modified
2026-07-27T03:56:16.317766629Z
Severity
  • 8.4 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
Details

Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.

To mitigate this issue, users should upgrade to the patched version 1.18.1.

Database specific 
{
    "cna_assigner": "AMZN",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16796.json",
    "cwe_ids": [
        "CWE-88"
    ]
}
References

Affected packages

Git / github.com/aws/bedrock-agentcore-sdk-python

Affected ranges

Type
GIT
Repo
https://github.com/aws/bedrock-agentcore-sdk-python
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
a4bc13fe13aa3714cca49f3471ed3d20b804e385
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.18.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

v0.*
v0.1.0
v0.1.1
v0.1.3
v0.1.4
v0.1.5
v0.1.6
v0.1.7
v1.*
v1.0.0
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.1.4
v1.1.5
v1.10.0
v1.11.0
v1.12.0
v1.13.0
v1.14.0
v1.14.1
v1.15.0
v1.15.1
v1.16.0
v1.17.0
v1.18.0
v1.2.0
v1.2.1
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.4.0
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.4.6
v1.4.7
v1.4.8
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.2
v1.6.3
v1.6.4
v1.7.0
v1.8.0
v1.9.0
v1.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16796.json"