One Prompt Exposed Every Agent in Its Region Under AWS's Old AgentCore Default

Zenity Labs reported on October 8, 2026, that one prompt to an exposed Amazon Bedrock AgentCore agent returned the credentials of its default role. That role covered every AgentCore agent in the account’s region, their private conversations and their stored secrets. AWS has since narrowed it.