Is CVE-2026-106032 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-106032 being exploited in the wild.

How severe is CVE-2026-106032?

Medium severity, with a CVSS score of 5.7, published 6 October 2026.

Which products and versions are affected?

Amazon Bedrock Agentcore Starter Toolkit before 0.3.14.

How is CVE-2026-106032 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-106032?

Check whether you run Amazon Bedrock Agentcore Starter Toolkit at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-106032: Amazon Bedrock AgentCore Starter Toolkit server-side request forgery in OpenAPI schema processing

CVE-2026-106032 · Severity: medium · CVSS 5.7 · Published 2026-10-06

Amazon Bedrock AgentCore Starter Toolkit is a development toolkit for building AI agents on AWS Bedrock. A server-side request forgery vulnerability in the OpenAPI schema processing of the agent import feature allows authenticated users in the same AWS account to cause the toolkit to make arbitrary outbound requests and read arbitrary local files. This could enable an attacker to access sensitive files or exfiltrate data from the user's environment.

Technologies: Amazon Bedrock Agentcore Starter Toolkit. Vendors: Amazon.

Quick answers

Is CVE-2026-106032 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-106032 being exploited in the wild.
How severe is CVE-2026-106032?: Medium severity, with a CVSS score of 5.7, published 6 October 2026.
Which products and versions are affected?: Amazon Bedrock Agentcore Starter Toolkit before 0.3.14.
Is there a fix for CVE-2026-106032?: Yes: fixed in 0.3.14. Until then: Upgrade to bedrock-agentcore-starter-toolkit version 0.3.14 or migrate to the @aws/agentcore npm CLI, which is the supported replacement and does not contain this vulnerability. The Starter Toolkit is deprecated in favor of AgentCore CLI for new projects. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-106032 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-106032?: Check whether you run Amazon Bedrock Agentcore Starter Toolkit at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 0.3.14

Upgrade to bedrock-agentcore-starter-toolkit version 0.3.14 or migrate to the @aws/agentcore npm CLI, which is the supported replacement and does not contain this vulnerability. The Starter Toolkit is deprecated in favor of AgentCore CLI for new projects.

Technical details

The vulnerability exists in the OpenAPI schema processing functionality used for importing Bedrock Agent action groups. An authenticated actor in the same AWS account can craft external reference values in OpenAPI content to trigger server-side request forgery (SSRF) attacks. The vulnerability allows reading arbitrary local files and issuing arbitrary outbound requests from the importing user's environment. A fix is available in version 0.3.14.

Affected products

Amazon Bedrock AgentCore Starter Toolkit before 0.3.14

Timeline

2026-10-06: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.