LOWSupply Chain
Global

CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF

·Source: AWS Security Bulletins

Updated:

Executive Summary

Bulletin ID: 2026-127-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/06/2026 13:30 PM PDT Description: bedrock-agentcore-starter-toolkit is an AWS-maintained open-source Python package, distributed via GitHub and PyPI, that provides a command-line interface for importing Amazon Bedrock Agents into

Analysis

Bulletin ID: 2026-127-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/06/2026 13:30 PM PDT Description: bedrock-agentcore-starter-toolkit is an AWS-maintained open-source Python package, distributed via GitHub and PyPI, that provides a command-line interface for importing Amazon Bedrock Agents into local development environments. We identified CVE-2026-105812, a code injection issue that could allow arbitrary code execution when a specially crafted agent is imported and subsequently run or deployed, and CVE-2026-106032, an external reference handling issue that could cause unintended network requests or local file access during agent import. Affected versions: >= 0.1.4 and Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

Indicators of Compromise (2)

CVE (2)
CVE-2026-105812
NVDMITRE CVE
CVE-2026-106032
NVDMITRE CVE
Source Attribution

Originally published by AWS Security Bulletins on Oct 6, 2026.

Related Threats

CRITICALSupply Chain

US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny

DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American labs. The US Secretary of Homeland Security has issued an order banning all DeepSeek products and services from federal agencies. Government organizations must purge their IT systems of it within 60 days; those with “compelling justification” c

CSO Online
LOWSupply Chain

Pluto Security Raises $42M for Agentic Workspace Defense

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/pluto-security-raises-42m-for-agentic-workspace-defense-image_small-6-a-33154.jpg" align=right hspace=4><b>Startup Uses Endpoint Telemetry to Understand Agent Intent and Enforce Policies</b><br>Pluto Security emerged from stealth with $42 million to protect enterprise agentic AI workflows, using endpoint telemetry and local models

Bank Info Security
MEDIUMSupply Chain

ConnectWise customers hit by supply-chain attack linked to compromised API secret

Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded. The post ConnectWise customers hit by supply-chain attack linked to compromised API secret appeared first on CyberScoop .

CyberScoop