The AWS AgentCore's Code Interpreter sandbox network isolation mode can be bypassed, allowing data to be sent and received from external endpoints via DNS tunneling, which contradicts the promised 'complete isolation with no external access'.
| Vendor | Product | Versions |
|---|---|---|
| amazon web services | amazon bedrock agentcore | — |
