// AWSHIGH
Amazon Bedrock AgentCore contained a vulnerability allowing attackers to steal temporary AWS credentials and access agent source code through prompt-injection-triggered SSRF attacks exploiting IMDSv1. An overpermissioned default IAM role amplified the risk, enabling access to other agents, ECR images, and user sessions within the account. AWS patched IMDSv1 by February 2026 and addressed IAM permissions by September 2026.
// Get alerts for AWS