Disclosure summary
Bulletin ID: 2026-127-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/06/2026 13:30 PM PDT Description: bedrock-agentcore-starter-toolkit is an AWS
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Latest Bulletins · RSS-0d12d9da9901afda20e40e955b0753fafda
Open original source · Updated Oct 06, 2026
CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF
CVE mention in publisher metadata; check the original affected versions.
Original records & references
- NIST NVD record
- CVE Program record
- aws.amazon.com — Publisher advisory
PUBLISHED 2026-10-06T16:41:24-04:00
MODIFIED 2026-10-06T16:41:24-04:00
INGESTED 2026-10-08T12:10:48-04:00