'AgentCorruption' Flaw in AWS Bedrock AgentCore Could Enable Fleet Takeover

A now-patched vulnerability in AWS Bedrock AgentCore, dubbed 'AgentCorruption', could have let an attacker use a single malicious prompt against one AI chatbot to compromise an organization's entire AWS agent fleet.

Disclosed 8 October 2026 · Record updated 9 October 2026

Impact

Potential for an attacker to leverage a single crafted prompt to take over an organization's entire fleet of AI agents running on AWS Bedrock AgentCore; the issue was patched before public disclosure.

Our coverage

A puppet master's single thread unravels, causing an entire army of marionettes to dance in lockstep toward an open vault.

Vulnerabilities

'AgentCorruption' flaw in AWS Bedrock AgentCore now patched

Dark Reading reports that a single prompt aimed at one chatbot could have given an attacker control of an organisation's whole fleet of AWS agents.

9 Oct 2026

Sources

darkreading.comhttps://darkreading.com/cloud-security/agentcorruption-aws-environments-at-risk-single-prompt