Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h8gv-mm2p-4q56

Опубликовано: 04 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 8.1

Описание

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

EPSS

Процентиль: 44%
0.0053
Низкий

8.6 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-1287

Связанные уязвимости

CVSS3: 8.1
nvd
около 2 месяцев назад

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

EPSS

Процентиль: 44%
0.0053
Низкий

8.6 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-1287