AWS AgentCore CLI Code Injection Vulnerability (CVE-2024-12363)

Vulnerability Overview Vulnerability Name: Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Import Description: Tool: AgentCore CLI ( ) is a development tool used to manage the lifecycle of agent infrastructure on Amazon Bedrock AgentCore. Issue: In certain scenarios, a carefully crafted value stored in Bedrock Agent collaborator metadata can break Python triple-quoted strings, leading to arbitrary code execution during code generation or deployment. Affected Scope Affected Versions: - (npm) - - Impact: - When a user imports a Bedrock supervisory agent with multi-agent collaboration capabilities using , the CLI retrieves collaborator metadata from the Bedrock API and inserts the field directly into the generated Python string. Due to insufficient escaping, a carefully crafted value can terminate the string boundary and inject arbitrary Python statements. - The injected code executes in two contexts: when the developer runs on their local machine, and when the agent is invoked by after running in the AWS AgentCore Runtime environment, using the agent's IAM execution role. - Customers who have already imported agents and deployed them using affected versions remain exposed with every agent invocation until they regenerate and redeploy the agent. Remediation Fixed Versions: - - Recommendations: - Upgrade to the latest version and ensure that any forked or derived code is also patched to include the new fix. - For customers who have already executed , the affected agent must be removed from the project. Use the patched CLI to regenerate , and redeploy to AWS to replace the previously deployed artifacts. Simply upgrading the CLI does not fix code that has already been generated or deployed. Additional Information CVSS v3 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: Required - Scope: Changed - Confidentiality: High - Integrity: High - Availability: High CVE ID: CVE-2024-12363 Weakness: CWE-94 References: - For questions or comments, please contact the AWS Security team via the Vulnerability Reporting Page or by sending an email directly to . Do not create public GitHub issues.

Goal Reached Thanks to every supporter — we hit 100%!

AWS AgentCore CLI Code Injection Vulnerability (CVE-2024-12363)

More from this source