A Single Prompt Compromised Every Agent in the Account. AWS Calls It Expected Behavior.

At SecTor 2026 in Toronto, researchers Tamir Ishay Sharbat and Lana Salameh of Zenity Labs detailed a flaw they termed AgentCorruption. The attack relies on SSRF, a technique where an application is manipulated into making unauthorized…