AWS GHSA-5xmr-2rcp-3j75: local reads and outbound requests during agent import

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsAgentCore importer followed hostile OpenAPI references into files and networks: The vulnerable import path accepts crafted external OpenAPI reference values associated with a Bedrock Agent action group and can issue unexpected outbound HTTP requests or local file reads during the import operation.

  Advisory: Summary and Impact

• supportsAgentCore importer followed hostile OpenAPI references into files and networks: An authenticated same-account principal with permission to modify an action group OpenAPI schema could cause another user's importing environment to access arbitrary local files or network destinations.

  Advisory: Impact, principal and import environment

• supportsAgentCore importer followed hostile OpenAPI references into files and networks: The advisory lists affected toolkit releases 0.1.4 through 0.3.13 and repair in 0.3.14, with re-import and replacement of generated artifacts recommended.

  Advisory: Affected versions; Patched versions; Patches