🔺Severity: High
👽 Reporter: mistercloudsec
⭐️ Reputation: 163
🛠 State: resolved
💼 Team: AWS VDP
💵 Bounty: null
🕐 Submitted: 2026-03-28
⏰ Disclosed: 2026-09-16 20:57:22
📝 Summary: The Bedrock AgentCore Python SDK was found to have an incomplete input sanitization vulnerability in the
install packages() method. The sanitization process failed to properly handle certain pip flags, such as --index-url, which allowed arbitrary command execution within the Code Interpreter sandbox. This vulnerability was discovered to affect all versions of the bedrock-agentcore-sdk-python up to at least v1.4.8.📂 Report JSON File: 3633123
@hackeronereports