Skip to content
Critical Flaw in Major AI Platforms Exposes Security Vulnerabilities

Critical Flaw in Major AI Platforms Exposes Security Vulnerabilities

First seen 20 Oct 2026, 21:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 22:21 UTC
  • •CoreBreak flaw affects major AI platforms: AWS, Google, and Vercel.
  • •Critical CVE-2026-18236 (CVSS 9.3) patched by Google.
  • •Out-of-band policy enforcement recommended to prevent future exploits.

At Black Hat 2026, researchers Aviyam Ivgi and Hedi Ingber revealed a significant flaw, named CoreBreak, affecting AWS Bedrock AgentCore, Google’s Agent Development Kit, and Vercel’s AI SDK. The flaw allows attackers to bypass security guardrails by manipulating message histories and approval mechanisms. AWS patched CVE-2026-18830 (CVSS 8.1), Google addressed CVE-2026-18236 (CVSS 9.3), and Vercel patched CVEs 2026-64650 and 2026-64651 (both CVSS 6.3). The researchers emphasized the need for out-of-band policy enforcement to prevent such vulnerabilities. CoreBreak also exposed risks of credential theft through injected instructions. The flaws highlight the inadequacies of current AI security measures, with agents relying solely on prompt rules failing in over half of the trials conducted by Redpanda. The urgency for improved security measures is underscored by the critical nature of the vulnerabilities discovered.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-07-20
CVE-2026-64650 and CVE-2026-64651 published
Vercel released patches for two vulnerabilities with CVSS scores of 6.3, addressing security flaws in their AI SDK.
Westhawaiitoday
2026-07-29
CVE-2026-18236 published
Google patched a critical vulnerability (CVSS 9.3) in its Agent Development Kit, enhancing security measures.
Westhawaiitoday
2026-08-04
CVE-2026-18830 published
AWS released a patch for a high-severity vulnerability (CVSS 8.1) in its Bedrock AgentCore.
Westhawaiitoday
2026-08-11
First public PoC for CVE-2026-18830
Proof-of-concept code for the AWS vulnerability was publicly shared, raising concerns about its exploitation.
Westhawaiitoday

More articles in this cluster (5)

Following this threat?

Track CVE-2026-18236 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (14)

1 / 3

Common questions

Which AI platforms are affected?
The flaw affects AWS Bedrock AgentCore, Google’s Agent Development Kit, and Vercel’s AI SDK.
What are the CVSS scores of the vulnerabilities?
CVE-2026-18236 has a CVSS score of 9.3, CVE-2026-18830 has a score of 8.1, and CVEs 2026-64650 and 2026-64651 both have scores of 6.3.
What should organizations do to mitigate this risk?
Organizations should apply the latest patches from AWS, Google, and Vercel, and consider implementing out-of-band policy enforcement.