Zenity Labs
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 1
- One prompt hijacked every AgentCore agent in an AWS account, Zenity says
Security firm Zenity Labs published research on a vulnerability chain it calls "AgentCorruption": chat access to a single public Amazon Bedrock AgentCore agent was enough to trick it, in plain language, into querying the instance metadata service at 169.254.169.254 and sending its own temporary AWS credentials to an external server. Using AgentCore's overly broad default execution role, the researchers then listed and invoked every agent in the same account and region, downloaded their source code and container images, read private user-agent conversations and secrets from AWS Secrets Manager, and poisoned long-term memory to make the hijack persistent. Zenity says it reported the findings to AWS on 25 December 2025; AWS has since made IMDSv2 the default for new AgentCore deployments and narrowed the default role.
The Decoder · 🔥 0
Experience and discussion from the community
Share my Zenity Labs experienceAsk about Zenity Labs
Nobody has shared their experience with Zenity Labs yet.