Zenity researchers found that a single prompt is enough to hijack all AgentCore agents within an AWS account
Zenity researchers found that on the Amazon Bedrock AgentCore platform, a publicly accessible AI agent is sufficient to hijack all AgentCore agents within the same AWS account and region through the AgentCorruption chain vulnerability, exposing private chat records, source code, and storage credentials.













