AgentCore or AgentSore: Cross-Agent Privilege Escalation in Bedrock AgentCore

Bedrock AgentCore starter toolkit ships an overly permissive IAM role that attackers exploit to compromise critical AgentCore components. This article discusses practical exploitation of these weaknesses, detection opportunities & countermeasures.