The Decoder· Jonathan Kemper·· 25 days agoSelectedAI score80
Zenity 披露 AWS Bedrock AgentCore 漏洞：单个公开智能体可被用于劫持同区域全部智能体
One public-facing AI agent on AWS could read, rewrite, and delete every other agent in the region
Not yet translated; shown in Chinese.
AI guide
Zenity Labs 披露 Amazon Bedrock AgentCore 存在名为 AgentCorruption 的漏洞链，攻击者仅凭单条提示词即可诱导公开智能体泄露实例元数据凭证，进而横向控制同 AWS 账户和区域内的全部智能体。
Why it matters
原文揭示了云端智能体平台隔离失效与默认权限过大引发的横向接管风险，为企业多智能体架构权限隔离提供了参考。
Source:The Decoder · the-decoder.com