'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

Zenity Labs researchers disclosed an "AgentCorruption" issue in AWS Bedrock AgentCore where agents running in Firecracker MicroVMs could reach the Instance Metadata Service (IMDS) and retrieve temporary credentials. Because AgentCore's default role was over-privileged across an entire region, a single compromised public-facing agent could invoke other agents, read sessions, access AWS Secrets Manager, and enable broad lateral compromise; AWS responded by requiring IMDSv2 and tightening default agent permissions.