AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

SummaryThe AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...

EUVD-2026-48422

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK installpackages...

EUVD-2026-37802

Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK installpackages...

CVE-2026-12530

The issue CVE-2026-12530 affects the AWS Bedrock AgentCore Python SDK install_packages() in versions >= 1.1.3 and

CVE-2026-12530: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK versions = 1.1.3 and 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate thi...

AWS VDP: Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip Flags

The Bedrock AgentCore Python SDK was found to have an incomplete input sanitization vulnerability in the installpackages method. The sanitization process failed to properly handle certain pip flags, such as --index-url, which allowed arbitrary command execution within the Code Interpreter sandbox...

CentOS Update for kernel CESA-2012:1426 centos6

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2012:1426 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for vgatext and terminal-emulator 109155-01

Check for the Version of vgatext and terminal-emulator OpenVAS Vulnerability Test Solaris Update for vgatext and terminal-emulator 109155-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...