Bedrock AgentCore Starter Toolkit: S3 Verification Vulnerability Requires Immediate Update
Bedrock AgentCore Starter Toolkit versions before v0.1.13 have a critical S3 ownership verification flaw that could let attackers inject malicious code during builds. If you're running an older version and built it after September 24, 2025, you need to upgrade immediately to v0.1.13 or later. Users on v0.1.13+ or those who built earlier versions before that date are safe.
source: [aws/security-bulletin]