Article5 min read
Prompt injection in AWS AgentCore: when a vaulted credential becomes readable
Unit 42’s controlled support-agent demonstration traces a poisoned ticket through shell access to a replayable downstream credential.
Unit 42’s AWS AgentCore prompt injection research shows how shell access exposed an in-use credential, with lessons for tool scope and runtime isolation.
Read article