CVE-2026-18830: Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18830?
The severity of CVE-2026-18830 is rated high with a score of 8.1.
How do I fix CVE-2026-18830?
No customer action is required as AWS has addressed the issue for CVE-2026-18830.
What is CVE-2026-18830 about?
CVE-2026-18830 involves insufficient input validation in the Amazon Bedrock AgentCore harness that may allow authenticated remote users to bypass security controls.
What impact does CVE-2026-18830 have on users?
CVE-2026-18830 could potentially allow exploitation through crafted content blocks in conversation messages.
When was CVE-2026-18830 published?
CVE-2026-18830 was published on August 4, 2026.