A VAULT WITH A HEAP-VIEW: THE UNCOMFORTABLE SPACE BETWEEN AGENTCORE HARNESS AND IDENTITY

Summary from the TLDR InfoSec newsletter

AWS AgentCore Harness is an agentic service and AgentCore Identity is a service that provides agents with identities. Unit 42 discovered that the bash tool that is enabled by default on AgentCore agents runs arbitrary bash commands and code as root. Using this primitive, the researchers demonstrated that they could exfiltrate the AgentCore Identity JWT by scanning the heap for it and then exfiltrating it.