---
id: CVE-2026-18830
title: >-
  Insufficient input validation in Amazon Bedrock AgentCore harness might allow
  an authenticated remote user to execute configured tools bypassing model
  invocation and security controls via crafted content blocks in conversation
  messages
summary: >-
  Insufficient input validation in Amazon Bedrock AgentCore harness might allow
  an authenticated remote user to execute configured tools bypassing model
  invocation and security controls via crafted content blocks in conversation
  messages. …
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-1287
published: '2026-08-04'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T21:16:43.743'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-18830'
references:
  - url: 'https://aws.amazon.com/security/security-bulletins/2026-073-aws/'
    label: ff89ba41-3aa1-4d27-914a-91399e9639e5
tags:
  - nvd
  - exploit-available
epss: 0.00507
epssPercentile: 0.41472
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/huzjie/aegisagent'
  checkedAt: '2026-10-12T14:51:08.511Z'
exploitAvailable: true
ingestedAt: '2026-10-12T14:50:34.034Z'
---

## Overview

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.