CVE-2026-11393: AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping
The AgentCore CLI (@aws/agentcore) is a developer tool for managing agent infrastructure lifecycle on Amazon Bedrock AgentCore. An issue exists where, under certain circumstances, a crafted collaborationInstruction value stored in Bedrock Agent collaborator metadata can break out of a Python triple-quoted string in code generated by the agentcore add agent --type import command, resulting in arbitrary code execution when the generated file is loaded or deployed.
References
- aws.amazon.com/security/security-bulletins/2026-040-aws
- github.com/advisories/GHSA-m4x6-gwgp-4pm7
- github.com/aws/agentcore-cli/commit/ae1b932ec91bacdbb7a3521f9f1fc24479a3d504
- github.com/aws/agentcore-cli/pull/1329
- github.com/aws/agentcore-cli/releases/tag/v0.14.2
- github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7
- nvd.nist.gov/vuln/detail/CVE-2026-11393
- www.npmjs.com/package/@aws/agentcore/v/0.14.2
- www.npmjs.com/package/@aws/agentcore/v/1.0.0-preview.9
Code Behaviors & Features
Detect and mitigate CVE-2026-11393 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →