Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.6epss 0.5%
from disclosure to weapon7 days
Published on NVDAug 4
1st PoC+7d
exploitation probability
0.5%top 56% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
AWS · Amazon Bedrock AgentCore harnesspublic PoCs found — 1
githubgithub.com/huzjie/aegisagent★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.