At Black Hat 2026, researchers Aviyam Ivgi and Hedi Ingber showed one structural flaw running through three of the largest agent stacks: AWS Bedrock AgentCore with the Strands SDK, Google’s Agent Development Kit, and Vercel’s AI SDK harness. They named that flaw CoreBreak. AWS patched CVE-2026-18830 (CVSS 8.6), Google patched CVE-2026-18236 (CVSS 9.3, critical), and Vercel patched The post A flaw in three major AI agent platforms shows why guardrails don't work appeared first on KESQ.
A flaw in three major AI agent platforms shows why guardrails don't work
