{"data":{"id":"bca47576-c9f0-4671-9d94-92c6d57fd7bb","title":"AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma","summary":"Palo Alto Networks' Unit 42 and Zenity Labs researchers report that AWS has repeatedly patched autonomous agent security holes in AgentCore, and that the flaws have reappeared in slightly different forms. On September 18, 2026, Unit 42 reported that default configurations in AWS AgentCore Harness let attackers use prompt injection to steer the agent into exfiltrating plaintext credentials managed by AgentCore Identity, since the built-in shell tool, enabled by default, runs as root inside the harness. AWS closed that report as informative under its shared responsibility model.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4232054/awss-repeated-problems-with-ai-agent-controls-illustrates-the-autonomous-agent-dilemma.html","publishedAt":"2026-10-08T13:05:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS AgentCore","AWS AgentCore Harness","AWS AgentCore Identity","AgentCore Runtime","Strands"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-08T13:05:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}