Techtimes CoreBreak Vulnerability Exposes AI Agent Frameworks to Unauthorized Tool Use
Article Content
- •CoreBreak vulnerability allows unauthorized tool invocation in AI agent frameworks.
- •AWS's InvokeHarness API was assigned CVE-2026-18830 and patched on July 31, 2026.
- •Strands Python SDK remains unpatched, leaving a potential attack vector open.
Security researchers revealed multiple vulnerabilities in AI agent frameworks, allowing unauthorized tool use and potential remote code execution (RCE). The CoreBreak vulnerability affects Amazon Web Services (AWS), Google, and Vercel, with AWS's InvokeHarness API being a primary target. AWS assigned CVE-2026-18830 to a flaw enabling attackers to bypass model authorization and invoke tools directly. While AWS and Google have patched their respective vulnerabilities, the Strands Python SDK remains unpatched. The flaws were disclosed during Black Hat USA 2026, highlighting risks in agent orchestration and tool execution logic. The vulnerabilities could lead to significant security breaches if exploited. The overall impact spans multiple frameworks, including LangChain and Microsoft Agent Framework, with various attack vectors identified.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (9)
Following this threat?
Track Amazon Web Services and CVE-2026-18236 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Flaw in Major AI Platforms Exposes Security Vulnerabilities At Black Hat 2026, researchers Aviyam Ivgi and Hedi Ingber revealed a significant flaw, named CoreBreak, affecting AWS Bedrock AgentCore, Google’s Agent Development Kit, and Vercel’s AI SDK. The flaw allows attackers to bypass security guardrails by manipulating message histories and approval mechanisms. AWS patched… 
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…