CVE-2026-11393
30-day in-the-wild exploitation forecast
Description
Improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2 might allow an authenticated remote threat actor to execute arbitrary code on AWS AgentCore Runtime under the imported agent's IAM execution role and on the local environment of another user in the same AWS account, via a crafted collaborationInstruction stored on a Bedrock Agent collaborator and later processed by that other user during agent import.
To remediate this issue, users should upgrade to version 0.14.2.
CVSS Vector Details
Modify values to recalculate the CVSS score in real-time
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
Affected Software Configurations
- Aws Agentcore Cli
Weaknesses (CWE)
- CWE-94
Exploit Prediction Scoring System (EPSS)
0.34% probability of exploitation in the next 30 days.
Higher than 28% of all CVEs
Official Advisories & References
- https://github.com/aws/agentcore-cli/releases/tag/v0.14.2
- https://www.npmjs.com/package/@aws/agentcore/v/0.14.2
- https://www.npmjs.com/package/@aws/agentcore/v/1.0.0-preview.9
- https://aws.amazon.com/security/security-bulletins/2026-040-aws/
- https://github.com/aws/agentcore-cli/security/advisories/GHSA-m4x6-gwgp-4pm7
CVE-2026-11393 AI (Artificial Intelligence) Analysis
External Resources
Technical Resources
Community & Discussion
Critical Vulnerabilities — Last 7 Days
Real-time tracking of CVSS 9.0+ remote execution zero-days, public exploit code, and ransomware-linked vulnerabilities disclosed this week.
CVE History Timeline
Frequently Asked Questions
CVE-2026-11393 is a Critical severity security vulnerability affecting Aws Agentcore Cli. Improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2 might allow an authenticated remote threat actor to execute arbitrary code...
This vulnerability has a CVSS score of 9 out of 10, rated as Critical. Critical vulnerabilities can be exploited remotely without authentication and may lead to full system compromise, data theft, or malware installation.
This vulnerability affects Aws Agentcore Cli products. Users of affected versions should apply security updates immediately.
To protect against CVE-2026-11393, you should: (1) Apply the latest security patches from Aws, (2) Check official security advisories for specific remediation steps, (3) Update affected software to the latest version, and (4) Monitor your systems for any signs of exploitation.
This vulnerability was publicly disclosed on June 8, 2026. Organizations should check if they were vulnerable during the period before the patch was available.
No public exploit code has been confirmed for CVE-2026-11393 at this time. Security teams should monitor threat feeds for emerging developments and apply vendor patches proactively.
Currently, CVE-2026-11393 is not recorded in the CISA Known Exploited Vulnerabilities (KEV) catalog as being actively exploited in the wild. Security teams should still patch proactively to prevent zero-day targeting.