Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent’s tools with no check that a model turn had authorized them.
In several of the attack paths, the model never ran at all, so system prompts, content filters, and model-level guardrails never got a chance to intervene.
The affected products include Amazon Bedrock AgentCore’s InvokeHarness API, Google’s Agent Development Kit (ADK) for Python, and the Vercel AI SDK harness packages for the Codex and OpenCode coding agents. AWS has fixed the managed service, Google addressed the issues in ADK 2.5.0, and Vercel patched @ai-sdk/harness-codex in version 1.0.29 and @ai-sdk/harness-opencode in version 1.0.28.
These are not identical vulnerabilities and do not share the same attack conditions. AWS involved an authenticated remote request, Google’s paths required attacker-controlled session events or user-authored function calls, and Vercel’s flaws…
https://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.html