One prompt took over the agents, and AWS says that is documented behaviour
2026-11-09AI
Zenity Labs got a public-facing Bedrock AgentCore agent to read out its own execution-role credentials, then used them to reach every other agent in the account and region. AWS says the research mistakes documented behaviour for a vulnerability.