According to CoinMeta, as reported by Forkast, researchers Tamir Ishay Sharbat and Lana Salameh detailed a vulnerability named agentcorruption at the Sector conference in Toronto in 2026. This attack leverages SSRF technology, allowing attackers to query instance metadata services (IMDS) through public AWS Bedrock AgentCore proxies, thereby obtaining temporary AWS credentials. Due to the lack of sufficient network isolation in the underlying Firecracker microvirtual machines, attackers were able to access the metadata endpoints, posing a threat to the security of the entire environment. AWS initially considered this behavior to be expected, but subsequently took enhanced measures to reduce the permissions of the executing roles. This incident highlights the ongoing tensions in cloud security, especially regarding the security of default configurations.