Amazon Bedrock AgentCore vulnerability allows privilege escalation and data exfiltration

Amazon Bedrock AgentCore has a vulnerability called "Agent God Mode" due to overly broad IAM permissions. This allows for privilege escalation and data exfiltration risks. The starter toolkit automatically creates IAM roles with excessive permissions, enabling compromised agents to access other agents' memories, invoke code interpreters, and exfiltrate sensitive data like ECR images. AWS has updated documentation to warn that these default roles are for development and testing, not production, and recommends custom, least-privilege roles.