Security flaws in agent infrastructure from AWS, Google, and Vercel allowed untrusted or forged instructions to reach an agent’s tools without model authorization. In several cases, the model never ran, bypassing system prompts, content filters, and model-level guardrails. Affected products include Amazon Bedrock, Google Vertex AI, and Vercel AI SDK, highlighting a critical gap in AI agent security.