Zenity Labs found that chat access to one public Amazon Bedrock AgentCore agent could compromise every AgentCore agent in the same AWS account and region, exposing conversations, source code and credentials through unrestricted access to AWS’s internal metadata service. AWS has patched the flaw and