AWS Bedrock AgentCore Starter Toolkit

• CVE-2026-106032 Medium 5.7 Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import 0.2%
• CVE-2026-105812 Critical 9.0 Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import 0.3%
• CVE-2026-4269 High 7.5 Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit 0.3%