Agent flaws let hackers bypass AI model guards in AWS, Google, Vercel
Researchers exposed three independent agent‑infrastructure bugs that let untrusted code invoke tool calls without a model turn, nullifying prompts and content filters. AWS, Google and Vercel have shipped patches, but the exploits demonstrate a systemic gap in how AI SDKs verify tool‑call provenance, raising risk for any deployed agent.