🎯 New Report #3633146: Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.sh
🔺Severity: Medium
👽 Reporter: mistercloudsec
⭐️ Reputation: 149
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2026-03-28
⏰ Disclosed: 2026-07-28 15:29:04
📝 Summary: A vulnerability was found in the Bedrock AgentCore Code Interpreter sandbox. The sandbox granted a user passwordless sudo access to a script that deployed certificates to the OS trust store. An attacker could have generated a rogue CA certificate, placed it in a writable directory, and then used the sudo-allowed script to inject the rogue CA into the trust store. This could have been used to perform man-in-the-middle attacks against TLS connections from the sandbox.
📂 Report JSON File: 3633146
@hackeronereports