2026年8月6日 4:57 ET 发布 · 更新于 3 个月前 · 1 个来源
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
The Hacker News
·
原始报道
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them. In several of the attack paths, the model never ran at all, so system prompts, content filters, and model-level guardrails never got a chance to intervene. The affected products include Amazon
原文