Record · corpus.blog/posts/01a0d4a3-14c2-7331-a2c2-b45b928f5a28

Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox

Unit 42 · published 7 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture

5blogs citing

First cited: 27 Apr 2026
Most recent: 19 Sept 2026
Rank this month: not ranked
Links from this post: 21
Words captured: 3,333

Cited by

Blog

In the post

Date

Lobsters

we have a year to fix security everywhere Read at the source ↗

19 Sept 2026

the website of jyn

we have a year to fix security everywhere Read at the source ↗

4 Sept 2026

Tigera Blog

The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It Read at the source ↗

27 Aug 2026

blog.technodrone.cloud

Unexpected Code Execution: When Your Agent Becomes a Shell (ASI05) Read at the source ↗

15 Jul 2026

haitmg.pl

AWS Abuse Pattern Detection: 10 Open Source Signals (2026) Read at the source ↗

12 May 2026

haitmg.pl

AWS Bedrock AgentCore: VPC Mode Still Leaks DNS After Unit 42 Disclosure Read at the source ↗

27 Apr 2026

Links from this post

Link

Host

https://aws.amazon.com/blogs/machine-learning/introducing-the-amazon-bedrock-agentcore-code-interpreter/

aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agents-tools-runtime.html

docs.aws.amazon.com

https://owasp.org/www-community/attacks/Server_Side_Request_Forgery

owasp.org

https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management

paloaltonetworks.com

https://docs-cortex.paloaltonetworks.com/r/Cortex-CLOUD/Cortex-Cloud-Runtime-Security-Documentation/What-is-Cortex-Cloud-Identity-Security

docs-cortex.paloaltonetworks.com

https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment

paloaltonetworks.com

https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment

paloaltonetworks.com

https://start.paloaltonetworks.com/contact-unit42.html

start.paloaltonetworks.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/what-is-bedrock-agentcore.html

docs.aws.amazon.com

https://web.archive.org/web/20250731114200/https:/docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-create.html

web.archive.org

https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunneling

paloaltonetworks.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-resource-management.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html

docs.aws.amazon.com

https://blog.qualys.com/vulnerabilities-threat-research/2024/09/12/totalcloud-insights-unmasking-aws-instance-metadata-service-v1-imdsv1-the-hidden-flaw-in-aws-security

blog.qualys.com

https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-vpc.html

docs.aws.amazon.com

https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/whitepapers/close-ai-security-gap

paloaltonetworks.com

https://www.cyberthreatalliance.org

cyberthreatalliance.org

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/security-credentials-management.html

docs.aws.amazon.com

When an Attacker Meets a Group of Agents: Navigating Amazon Bedrock's Multi-Agent Applications Read at the source ↗

unit42.paloaltonetworks.com