AWS AgentCore CLI vulnerabilities

Latest AWS AgentCore CLI CVEs

Newest publication first

1. CVE-2026-11393 Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import

   Published 2026-06-08

   High·CVSS 8.8

   Improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2 might allow an authenticated remote threat actor to execute arbitrary code on AWS AgentCore Runtime under the imported agent's IAM execution role and on the local envi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.