# CVE-2026-105812: Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

> CVE-2026-105812: Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import. CVSS 9.0 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-105812
Last updated: 2026-10-07T16:17:34Z

- Published: 2026-10-06 20:34 UTC · Updated: 2026-10-07 16:17 UTC · Assigner: AMZN
- CVSS: 9.0 (CVSS 3.1) · Severity: Critical · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- EPSS: 0.28%, 21th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-94

## Description

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values incorporated into generated Python source without safe literal encoding. To remediate this issue, users should upgrade to version 0.3.14. Because this issue persists into generated source, upgrading alone is not sufficient: agents imported with an affected version must be re-imported with version 0.3.14 or later and their local and deployed output artifacts replaced.

## Affected vendors and products

- aws: bedrock-agentcore-starter-toolkit

## Tracked companies

- [Amazon Web Services](https://rewindex.com/company/aws.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-105812)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-105812)
- [https://aws.amazon.com/security/security-bulletins/2026-127-aws/](https://aws.amazon.com/security/security-bulletins/2026-127-aws/)
- [https://pypi.org/project/bedrock-agentcore-starter-toolkit/0.3.14/](https://pypi.org/project/bedrock-agentcore-starter-toolkit/0.3.14/)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-105812 · Markdown: https://rewindex.com/cve/CVE-2026-105812.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-105812 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:13:21.599Z