PT-2026-25792 · Unknown · Agentcore Runtime+1

Published 2026-03-16 · Updated 2026-05-11 · CVE-2026-4269

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bedrock AgentCore Starter Toolkit versions prior to v0.1.13

Description A missing S3 ownership verification may allow a remote actor to inject code during the build process, leading to code execution in the AgentCore Runtime. This issue affects users of the Bedrock AgentCore Starter Toolkit before version v0.1.13 who build the Toolkit after September 24, 2025. Successful exploitation could result in a complete loss of confidentiality, integrity, and availability of the affected AgentCore resource. The issue involves improper S3 ownership verification.

Recommendations Upgrade to version v0.1.13.

Fix

Weakness Enumeration

CWE-283

CWE-340

Related Identifiers

CVE-2026-4269

GHSA-XFHR-Q72Q-JCRJ

Affected Products

Agentcore Runtime

Bedrock Agentcore Starter Toolkit

References · 13

• https://github.com/aws/bedrock-agentcore-starter-toolkit/releases/tag/v0.1.13 · Patch
• https://osv.dev/vulnerability/CVE-2026-4269 · Vendor Advisory
• https://aws.amazon.com/security/security-bulletins/2026-008-AWS · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xfhr-q72q-jcrj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4269 · Security Note
• https://github.com/aws/bedrock-agentcore-starter-toolkit · Note
• https://github.com/aws/bedrock-agentcore-starter-toolkit/security/advisories/GHSA-xfhr-q72q-jcrj · Note
• https://twitter.com/dailycve/status/2034289302671073701 · Twitter Post
• https://twitter.com/cyberbivash/status/2033634044613644373 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2033799661769650593 · Twitter Post
• https://twitter.com/CVEnew/status/2033755333563215982 · Twitter Post
• https://t.me/cveNotify/163045 · Telegram Post
• https://twitter.com/cyberbivash/status/2033625683188916553 · Twitter Post