CVE-2026-18830 in Amazon Bedrock AgentCore harness

Zusammenfassung

von MITRE • 04.08.2026

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Zuständig: AMZN
• Reservieren: 04.08.2026
• Veröffentlichung: 04.08.2026
• Moderieren: akzeptiert
• Eintrag: VDB-385903
• CPE: bereit
• CWE: CWE-20 (bestätigt)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18830
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18830
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18830/