AWS VDP: Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip Flags

The Bedrock AgentCore Python SDK was found to have an incomplete input sanitization vulnerability in the installpackages method. The sanitization process failed to properly handle certain pip flags, such as --index-url, which allowed arbitrary command execution within the Code Interpreter sandbox...