CVE-2026-18236

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 6, 2026

Last Seen

October 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CoreBreak Vulnerability Exposes AI Agent Frameworks to Unauthorized Tool Use70.5

Security researchers revealed multiple vulnerabilities in AI agent frameworks, allowing unauthorized tool use and potential remote code execution (RCE). The CoreBreak vulnerability affects Amazon Web Services (AWS), Google, and Vercel, with AWS's InvokeHarness API being a primary target. AWS assigne...

Critical Flaw in Major AI Platforms Exposes Security Vulnerabilities70.5

At Black Hat 2026, researchers Aviyam Ivgi and Hedi Ingber revealed a significant flaw, named CoreBreak, affecting AWS Bedrock AgentCore, Google’s Agent Development Kit, and Vercel’s AI SDK. The flaw allows attackers to bypass security guardrails by manipulating message histories and approval mechan...