Critical 8.6
CVE-2026-18830
AWS AgentCore Harness Bypass Vulnerability Disclosure
Vendor / product: AWS Bedrock AgentCore harness, awslabs/aws-transform-mcp-server
Event date: 2026-08-04
Public PoC: Yes
First tracked by RiskWire: 2026-08-21
Sources & citations (1)
- AWS AgentCore Harness Bypass Exposed a Cross-Platform Vulnerability Class in Agent Runtimes tech.yahoo.com · 2026-08-22
References
See CVE-2026-18830 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →