Vulnerabilities
AWS patches Bedrock AgentCore SDK flaw allowing sandbox command injection
A remote authenticated user could run arbitrary commands in the Code Interpreter sandbox via crafted package names in older SDK versions.
Python SDK
Everything Threat Times has reported about Python SDK: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS patches Bedrock AgentCore SDK flaw that leaked prompts to CloudWatch logs
A vulnerability in the Bedrock AgentCore Python SDK exposed sensitive AI prompts and responses in CloudWatch logs until version 1.5.1 was released.
Vulnerabilities
AWS SageMaker Python SDK Has Model Artifact Integrity Flaws
Two CVEs in the Amazon SageMaker Python SDK allow bypassing model artifact integrity checks, posing risks to ML pipelines.