What is GHSA-h8gv-mm2p-4q56?

GHSA-h8gv-mm2p-4q56 is a security advisory published by GitHub Security Advisories with High severity. Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated...

Which CVE IDs does GHSA-h8gv-mm2p-4q56 cover?

GHSA-h8gv-mm2p-4q56 covers the following CVE IDs: CVE-2026-18830. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h8gv-mm2p-4q56?

GHSA-h8gv-mm2p-4q56 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-h8gv-mm2p-4q56HighCVSS 8.1

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated...

Vendor

GitHub Security Advisories

Published

August 4, 2026

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-18830 →

📋 Description

Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18830
https://aws.amazon.com/security/security-bulletins/2026-073-aws
https://github.com/advisories/GHSA-h8gv-mm2p-4q56