https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:01:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-340423 EUVD-2026-340423 https://cve.radiocsirt.org/vuln/euvd-2026-340423 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12530 <p>Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions &gt;= 1.1.3 and &lt; 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>To mitigate this issue, users should upgrade to version 1.6.1.</p> <p>Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK versions &gt;= 1.1.3 and &lt; 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>To mitigate this issue, users should upgrade to version 1.6.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12530 https://cve.radiocsirt.org/vuln/ghsa-6rfw-mq36-jm8h <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source SDK that enables developers to build, deploy, and manage agents on AWS Bedrock AgentCore. An issue exists in the install_packages() method of the Code Interpreter client where crafted package name arguments can bypass input validation and allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox.</p> <p>### Impact The install_packages() method constructs a &#39;pip install&#39; shell command executed within the Code Interpreter sandbox using package name arguments provided by the caller. The method applied an incomplete blocklist that allowed crafted package name arguments - specifically pip flags such as &#39;--index-url&#39; and &#39;-r&#39; - to pass validation unchecked. A remote authenticated user who can influence the arguments passed to install_packages() could redirect package resolution to a third-party-controlled PyPI server, or expose the contents of arbitrary sandbox files and environment variables.</p> <p>**Impacted versions:** AWS Bedrock AgentCore Python SDK (bedrock-agentcore) versions &gt;= 1.1.3 and &lt; 1.6.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.6.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are unable to upgrade immediately, avoid passing any user-supplied or externally-influenced strings directly to install_packages(). Re…</p> <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source SDK that enables developers to build, deploy, and manage agents on AWS Bedrock AgentCore. An issue exists in the install_packages() method of the Code Interpreter client where crafted package name arguments can bypass input validation and allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox.</p> <p>### Impact The install_packages() method constructs a &#39;pip install&#39; shell command executed within the Code Interpreter sandbox using package name arguments provided by the caller. The method applied an incomplete blocklist that allowed crafted package name arguments - specifically pip flags such as &#39;--index-url&#39; and &#39;-r&#39; - to pass validation unchecked. A remote authenticated user who can influence the arguments passed to install_packages() could redirect package resolution to a third-party-controlled PyPI server, or expose the contents of arbitrary sandbox files and environment variables.</p> <p>**Impacted versions:** AWS Bedrock AgentCore Python SDK (bedrock-agentcore) versions &gt;= 1.1.3 and &lt; 1.6.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.6.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are unable to upgrade immediately, avoid passing any user-supplied or externally-influenced strings directly to install_packages(). Re…</p> https://cve.radiocsirt.org/vuln/ghsa-6rfw-mq36-jm8h https://cve.radiocsirt.org/vuln/pysec-2026-2395 <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source SDK that enables developers to build, deploy, and manage agents on AWS Bedrock AgentCore. An issue exists in the install_packages() method of the Code Interpreter client where crafted package name arguments can bypass input validation and allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox.</p> <p>### Impact The install_packages() method constructs a &#39;pip install&#39; shell command executed within the Code Interpreter sandbox using package name arguments provided by the caller. The method applied an incomplete blocklist that allowed crafted package name arguments - specifically pip flags such as &#39;--index-url&#39; and &#39;-r&#39; - to pass validation unchecked. A remote authenticated user who can influence the arguments passed to install_packages() could redirect package resolution to a third-party-controlled PyPI server, or expose the contents of arbitrary sandbox files and environment variables.</p> <p>**Impacted versions:** AWS Bedrock AgentCore Python SDK (bedrock-agentcore) versions &gt;= 1.1.3 and &lt; 1.6.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.6.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are unable to upgrade immediately, avoid passing any user-supplied or externally-influenced strings directly to install_packages(). Re…</p> <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) is an open-source SDK that enables developers to build, deploy, and manage agents on AWS Bedrock AgentCore. An issue exists in the install_packages() method of the Code Interpreter client where crafted package name arguments can bypass input validation and allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox.</p> <p>### Impact The install_packages() method constructs a &#39;pip install&#39; shell command executed within the Code Interpreter sandbox using package name arguments provided by the caller. The method applied an incomplete blocklist that allowed crafted package name arguments - specifically pip flags such as &#39;--index-url&#39; and &#39;-r&#39; - to pass validation unchecked. A remote authenticated user who can influence the arguments passed to install_packages() could redirect package resolution to a third-party-controlled PyPI server, or expose the contents of arbitrary sandbox files and environment variables.</p> <p>**Impacted versions:** AWS Bedrock AgentCore Python SDK (bedrock-agentcore) versions &gt;= 1.1.3 and &lt; 1.6.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.6.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are unable to upgrade immediately, avoid passing any user-supplied or externally-influenced strings directly to install_packages(). Re…</p> https://cve.radiocsirt.org/vuln/pysec-2026-2395