Zenity: A message to a public assistant could open access to other AgentCore assistants

Zenity’s AgentCorruption research describes a potential cross-agent exposure in Amazon Bedrock AgentCore. A prompt to a public agent could, under specific