CVE-2026-18830 in Amazon Bedrock AgentCore harness

Сводка

по MITRE • 04.08.2026

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Ответственный: AMZN
• Резервировать: 04.08.2026
• Раскрытие: 04.08.2026
• Модерация: принято
• Вход: VDB-385903
• CPE: готов
• CWE: CWE-20 (Подтверждённый)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: Нет
• Деятельности: Низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18830
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18830
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18830/