AgentCorruption Flaw Exposed AWS to Complete Takeover via Single Prompt

A now-patched vulnerability in AWS Bedrock AgentCore allowed attackers to take over entire AWS environments with a single prompt. Researchers discovered that agents deployed through AgentCore could access sensitive data via Instance Metadata Services (IMDS), enabling control over all agents in the same AWS account and region. The flaw, dubbed AgentCorruption, stemmed from insufficient network isolation and over-privileged default roles, allowing lateral movement and memory poisoning attacks. AWS addressed the issue by updating AgentCore to use IMDSv2 and restricting default role permissions.