https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:51:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-340539 EUVD-2026-340539 https://cve.radiocsirt.org/vuln/euvd-2026-340539 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16796 <p>Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>To mitigate this issue, users should upgrade to the patched version 1.18.1.</p> <p>Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>To mitigate this issue, users should upgrade to the patched version 1.18.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16796 https://cve.radiocsirt.org/vuln/ghsa-j6g5-3hh3-pgw8 <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary</p> <p>The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the install_packages() method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>### Impact Insufficient input validation in install_packages() allows specially crafted package specifiers to bypass validation and achieve arbitrary command execution within the sandbox. A remote authenticated user who can influence the arguments to install_packages() can execute arbitrary commands within the Code Interpreter sandbox environment.</p> <p>### Impacted Versions &lt; 1.18.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.18.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are not able to upgrade, do not pass untrusted or model-generated input to install_packages(). Applications that must accept dynamic package names should validate them against strict PyPI naming rules -- including constraining any extras group to comma-separated identifiers -- before calling the SDK.</p> <p>### References If you have any questions or comments about this advisory, AWS asks that you contact AWS Security…</p> <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary</p> <p>The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the install_packages() method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>### Impact Insufficient input validation in install_packages() allows specially crafted package specifiers to bypass validation and achieve arbitrary command execution within the sandbox. A remote authenticated user who can influence the arguments to install_packages() can execute arbitrary commands within the Code Interpreter sandbox environment.</p> <p>### Impacted Versions &lt; 1.18.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.18.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are not able to upgrade, do not pass untrusted or model-generated input to install_packages(). Applications that must accept dynamic package names should validate them against strict PyPI naming rules -- including constraining any extras group to comma-separated identifiers -- before calling the SDK.</p> <p>### References If you have any questions or comments about this advisory, AWS asks that you contact AWS Security…</p> https://cve.radiocsirt.org/vuln/ghsa-j6g5-3hh3-pgw8 https://cve.radiocsirt.org/vuln/pysec-2026-3551 <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary</p> <p>The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the install_packages() method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>### Impact Insufficient input validation in install_packages() allows specially crafted package specifiers to bypass validation and achieve arbitrary command execution within the sandbox. A remote authenticated user who can influence the arguments to install_packages() can execute arbitrary commands within the Code Interpreter sandbox environment.</p> <p>### Impacted Versions &lt; 1.18.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.18.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are not able to upgrade, do not pass untrusted or model-generated input to install_packages(). Applications that must accept dynamic package names should validate them against strict PyPI naming rules -- including constraining any extras group to comma-separated identifiers -- before calling the SDK.</p> <p>### References If you have any questions or comments about this advisory, AWS asks that you contact AWS Security…</p> <p><strong>Affected:</strong> PyPI: bedrock-agentcore</p> <p>### Summary</p> <p>The AWS Bedrock AgentCore Python SDK (bedrock-agentcore) provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the install_packages() method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments.</p> <p>### Impact Insufficient input validation in install_packages() allows specially crafted package specifiers to bypass validation and achieve arbitrary command execution within the sandbox. A remote authenticated user who can influence the arguments to install_packages() can execute arbitrary commands within the Code Interpreter sandbox environment.</p> <p>### Impacted Versions &lt; 1.18.1</p> <p>### Patches This issue has been addressed in bedrock-agentcore version 1.18.1. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.</p> <p>### Workarounds If you are not able to upgrade, do not pass untrusted or model-generated input to install_packages(). Applications that must accept dynamic package names should validate them against strict PyPI naming rules -- including constraining any extras group to comma-separated identifiers -- before calling the SDK.</p> <p>### References If you have any questions or comments about this advisory, AWS asks that you contact AWS Security…</p> https://cve.radiocsirt.org/vuln/pysec-2026-3551