Today for AI
HOT RADAR
agentHEAT 0.0°

AI CURATED HOT STORY · 10/8/2026

Zenity Discloses AgentCorruption: Single Prompt Hijacks All AWS Bedrock AgentCore Agents and Steals Credentials

1 reports archived0 independent sourcesupdated 10/8/2026, 21:01:01
Synthesis & Latest Updates

Security firm Zenity Labs discovered a systemic vulnerability named 'AgentCorruption,' allowing attackers to hijack all agents within an AWS account and region via a single prompt sent to one publicly accessible Amazon Bedrock AgentCore agent. The exploit leverages excessive default role permissions and lack of isolation from the Instance Metadata Service (IMDS), enabling theft of private conversations, source code, and temporary cloud credentials.

LATEST/Security firm Zenity Labs discovered a systemic vulnerability named 'AgentCorruption,' allowing attackers to hijack all agents within an AWS account and region via a single prompt sent to one publicly accessible Amazon Bedrock AgentCore agent. The exploit leverages excessive default role permissions and lack of isolation from the Instance Metadata Service (IMDS), enabling theft of private conversations, source code, and temporary cloud credentials.

HEAT TRENDHourly heat curve

168 fully observed hours
Now
0.0
Peak
11.722:00
24h change
–

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

TIMELINECoverage timeline

Total 1 reports · Latest first
  1. The DecoderT2·85 pts
    • Minimal Attack Surface: A single prompt to one public agent enables lateral movement across all AgentCore instances in the entire AWS account.
    • Root Cause: Default IAM roles in AWS Bedrock AgentCore violate the principle of least privilege and fail to isolate agents from the internal metadata service (169.254.169.254).
    • Severe Impact: Successful exploitation allows stealing temporary cloud credentials, leading to access to other agents' private memories, source code, and sensitive business data.