Vulnerabilities
AWS Bedrock AgentCore 1.6.1 patches CVE-2026-12530 argument delimiter flaw
Attackers could use pip flags in package names to read files or redirect installs, a flaw now patched in version 1.6.1 of the Python SDK.
AWS
Everything Payload Report has reported about AWS: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS Research Studio CVE-2026-14904 Symlink Flaw Exposes Root Files
Authenticated users can read arbitrary root files on cluster managers by swapping SSH keys with symbolic links in the RES API.
Vulnerabilities
AWS databases-on-aws plugin fix stops unauthenticated remote code execution in v1.7.1
Amazon Web Services has released a fix for a high-severity flaw allowing remote command execution via crafted database commands.