AWS GHSA-37r5-8xpw-vxp9: generated code injection from crafted Bedrock Agent data

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsBedrock AgentCore importer generated executable Python from untrusted agent fields: Versions 0.1.4 through 0.3.13 of bedrock-agentcore-starter-toolkit are affected, with version 0.3.14 listed as patched.

  Advisory: Affected versions and Patched versions

• supportsBedrock AgentCore importer generated executable Python from untrusted agent fields: An authenticated principal in the same AWS account who can modify an agent may cause imported generated Python to execute under the importer user or AgentCore runtime role after another user imports and runs it.

  Advisory: Summary and Impact

• supportsBedrock AgentCore importer generated executable Python from untrusted agent fields: AWS instructs customers to re-import previously imported agents with a fixed toolkit and replace previously generated local/deployed artifacts; upgrading the dependency alone does not rewrite old output.

  Advisory: Patches, re-import and artifact replacement