Cracks in the Bedrock: Agent God Mode

Researchers uncovered that AWS Bedrock AgentCore’s starter toolkit creates overly broad IAM roles by default, enabling attackers who compromise a single agent to escalate privileges, access sensitive data, exfiltrate container images, and control other agents across the entire AWS account.