gcdRadar
products/amazon-bedrock-agentcore

Amazon Bedrock AgentCore

Filed as: Amazon Bedrock AgentCore Starter Toolkit, AWS Bedrock AgentCore Python SDK, Bedrock AgentCore Starter Toolkit

Records
4
Disclosed CVEs
4
Exploited (sev 3–4)
0
CISA KEV flagged
0

Newest record 2026-10-06 · 4 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Exploited or KEV-listed · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for Amazon Bedrock AgentCore has confirmed exploitation or a KEV flag.

Disclosures by month · last 24 months

Dec ’244 disclosed · peak 2 in Oct ’26Nov ’26

Disclosed CVEs, no confirmed exploitation · 4

  1. closed5.7
    Amazon Bedrock AgentCore SSRF in Amazon Bedrock AgentCore Starter Toolkit OpenAPI Schema Processing

    Disclosed · since 6 Oct 2026 · CVE-2026-106032

    AI
  2. closed9.0
    Amazon Bedrock AgentCore CVE-2026-105812: Amazon Bedrock AgentCore Starter Toolkit Code Generation Flaw

    Disclosed · since 6 Oct 2026 · CVE-2026-105812

    AI
  3. closed8.6
    Amazon Bedrock AgentCore Amazon Bedrock AgentCore Input Validation Vulnerability CVE-2026-18830

    Disclosed · since 4 Aug 2026 · CVE-2026-18830

    AI
  4. closed5.7
    Amazon Bedrock AgentCore CVE-2026-15737: AWS Bedrock AgentCore SDK logs sensitive user prompts

    Disclosed · since 16 Jul 2026 · CVE-2026-15737

    AI

Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.