CVE-2026-4269Disclosure(amazon / bedrock_agentcore_starter_toolkit)

LOWCVSS 5.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, leading to code execution in the AgentCore Runtime. This issue only affects users of the Bedrock AgentCore Starter Toolkit before version v0.1.13 who build or have built the Toolkit after September 24, 2025. Any users on a version >=v0.1.13, and any users on previous versions who built the toolkit before September 24, 2025 are not affected. To remediate this issue, customers should upgrade to version v0.1.13.

amazon CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://aws.amazon.com/security/security-bulletins/2026-008-AWS/

Other references

https://github.com/aws/bedrock-agentcore-starter-toolkit/releases/tag/v0.1.13

Weakness type (CWE)

CWE-283CWE-340

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bedrock_agentcore_starter_toolkit

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-03-16); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

amazon

Products

bedrock_agentcore_starter_toolkit

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-16	2	Disclosure1General1
2026-03-17	2	Disclosure1General1
2026-03-18	1	Disclosure1

Full discourse5 posts

DailyCVE@dailycve204d
Disclosure
🔴 #AWS Bedrock AgentCore Starter Toolkit, Code Injection, #CVE-2026-4269 (High) https://dailycve.com/aws-bedrock-agentcore-starter-toolkit-code-injection-cve-2026-4269-high/
Post summary
A brief disclosure of a high‑severity code injection vulnerability (CVE‑2026‑4269) in the AWS Bedrock AgentCore Starter Toolkit, with no additional exploit, patch, or active‑exploitation details.
0000030
169 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds205d
Disclosure
CVE-2026-4269 Remote Code Injection in Bedrock AgentCore Starter Toolkit Before v0.1.13 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4269
Post summary
The post announces CVE-2026-4269, a remote code injection flaw in Bedrock AgentCore Starter Toolkit before version 0.1.13, without providing a PoC, exploit, patch, or evidence of active exploitation.
0000057
4.0K followersView on X
CVE@CVEnew205d
General
CVE-2026-4269 A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, le… https://www.cve.org/CVERecord?id=CVE-2026-4269
Post summary
The CVE highlights a missing S3 ownership check in Bedrock AgentCore Starter Toolkit that could enable code injection during builds, but no PoC, exploitation evidence, patch, or false‑positive claim is mentioned.
00000106
56.7K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash205d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit Intel Report: https://ift.tt/I2ifPqK
Post summary
The alert highlights CVE-2026-4269 with a brief description but offers no PoC, exploit, or mitigation details.
0000047
335 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash205d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit Intel Report: https://ift.tt/GWLPemB
Post summary
An alert is issued for CVE-2026-4269, highlighting improper S3 ownership verification in Bedrock AgentCore Starter Toolkit, with an Intel report link provided for further details.
0000044
335 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	amazon	bedrock_agentcore_starter_toolkit	-	python	-

Explore more

Back to dashboard amazon CVEs bedrock_agentcore_starter_toolkit vulnerabilities

What researchers are saying

CVE-2026-4269

DailyCVE@dailycveDisclosure

A brief disclosure of a high‑severity code injection vulnerability (CVE‑2026‑4269) in the AWS Bedrock AgentCore Starter Toolkit, with no additional exploit, patch, or active‑exploitation details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-4269, a remote code injection flaw in Bedrock AgentCore Starter Toolkit before version 0.1.13, without providing a PoC, exploit, patch, or evidence of active exploitation.

CVE@CVEnewGeneral

The CVE highlights a missing S3 ownership check in Bedrock AgentCore Starter Toolkit that could enable code injection during builds, but no PoC, exploitation evidence, patch, or false‑positive claim is mentioned.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashGeneral

The alert highlights CVE-2026-4269 with a brief description but offers no PoC, exploit, or mitigation details.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

An alert is issued for CVE-2026-4269, highlighting improper S3 ownership verification in Bedrock AgentCore Starter Toolkit, with an Intel report link provided for further details.