security1 publisher
Unit 42 finds AWS AgentCore's default root shell can reach credentials the vault resolves in memory
AgentCore Harness enables a root bash tool in every session unless allowedTools says otherwise. AWS closed Unit 42's report as informative, so the scoping falls to whoever declares the agent.
Publishers:unit42.paloaltonetworks.com
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+22
- Incentives68
- Confidence58