PatchSiren cyber security CVE debrief

CVE-2026-11393 AWS CVE debrief

CVE-2026-11393 is a HIGH severity vulnerability with a CVSS score of 8.8. The vulnerability is due to improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2. This could allow an authenticated remote threat actor to execute arbitrary code on AWS AgentCore Runtime under the imported agent's IAM execution role and on the local environment of another user in the same AWS account, via a crafted collaborationInstruction stored on a Bedrock Agent collaborator and later processed by that other user during agent import.

Vendor: AWS
Product: AgentCore CLI
CVSS: HIGH 8.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-08
Original CVE updated: 2026-07-23
Advisory published: 2026-06-08
Advisory updated: 2026-07-23

Who should care

Users of AgentCore CLI before version 0.14.2, especially those using AWS AgentCore Runtime and Bedrock Agent.

Technical summary

The vulnerability arises from the lack of proper neutralization of triple-quote characters during Python code generation. This oversight could be exploited by an authenticated attacker to inject and execute arbitrary code.

Defensive priority

HIGH

Recommended defensive actions

Upgrade to AgentCore CLI version 0.14.2 or later.
Review and monitor collaborationInstructions stored on Bedrock Agent collaborators.
Ensure proper IAM execution role configurations for imported agents.

Evidence notes

Vendor: Unknown Vendor (candidate: Amazon).

Sources and references

Verified primary and authoritative sources

CVE-2026-11393 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-11393

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-11393 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-11393

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://aws.amazon.com/security/security-bulletins/2026-040-aws/

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://github.com/aws/agentcore-cli/releases/tag/v0.14.2

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://www.npmjs.com/package/@aws/agentcore/v/0.14.2

ff89ba41-3aa1-4d27-914a-91399e9639e5
Source reference
Unverified legacy reference

URL: https://www.npmjs.com/package/@aws/agentcore/v/1.0.0-preview.9

ff89ba41-3aa1-4d27-914a-91399e9639e5

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.