AWS fixed AgentCore flaws that exposed credentials and agent data

A security flaw let someone use a prompt to make an AI agent reveal temporary AWS credentials.

Those credentials could give access to other agents and users’ conversations in the same AWS region.

Researchers also found that the credentials had broader permissions than needed.

AWS updated AgentCore to use a safer metadata service and later addressed the remaining issues.