Security Flaw in AWS Bedrock Code Interpreter Raises Alarms

Researchers demonstrated a DNS-based exfiltration technique against AWS Bedrock AgentCore Code Interpreter Sandbox Mode in which malicious CSVs influence generated code to create a covert C2 channel over DNS, enabling command execution and extraction of S3 data and credentials; AWS marked DNS resolution as intended behavior and advises using VPC mode and tighter IAM controls for sensitive workloads.