Infrastructure
AWS AgentCore Harness Bypass Exposed a Cross-Platform Vulnerability Class in Agent Runtimes
CoreBreak research reveals CVE-2026-18830 allowed authenticated users to execute tools without model mediation in AWS Bedrock AgentCore, exposing a cross-platform vulnerability class affecting Google ADK and Vercel AI SDK.
◆ Blair Hayes