Zenity Discloses AWS AgentCore Multi-Vulnerability Chain That Can Hijack All Agents
Understand the story
On October 8, 2026, The Decoder reported that researchers at Zenity Labs disclosed a vulnerability chain in AWS Bedrock AgentCore named AgentCorruption. According to the report, an attacker needs only to send a single prompt to a public agent within the same AWS account and region to take over all AgentCore agents in that region. The report only described the existence of the vulnerability chain and its basic attack method, and did not disclose AWS's response, remediation progress, or any exploitation of the vulnerability.
AI overview of reporting · Updated 9 days ago
Reporting timeline
Explore different aspects of the story through its reporting.
- The DecoderOne public-facing AI agent on AWS could read, rewrite, and delete every other agent in the region
Zenity Labs researchers report a vulnerability chain in AWS Bedrock AgentCore, dubbed AgentCorruption, where a single prompt sent to one public agent within the same AWS account and region can take over all AgentCore agents in that region.