AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt
Zenity showed one prompt could steal Bedrock AgentCore credentials and reach other agents in the account.
Stories per day · 30 days
4 RSS
5 stories, newest first · one card per story
Stories tagged #agentcore
AWS AgentCore security undone by prompt requesting credentials
Zenity Labs showed one prompt could steal AWS AgentCore IMDS credentials and hijack regional agents.
'AgentCorruption' Puts AWS Environments At Risk With Single Prompt
Patched AWS Bedrock AgentCore flaw AgentCorruption could let one prompt seize an agent fleet.
A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found
Zenity says one prompt against a public Bedrock AgentCore agent could hijack every agent in that AWS region.
A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
Unit 42 found AWS AgentCore's default shell tool lets prompt injection reach plaintext AgentCore Identity credentials; AWS closed the report as informative.
7