CoreBreak Flaws Let Agent Tools Run Without the Model Ever Being Called
A Cloud Security Alliance research note describes CoreBreak, a pattern of flaws in Amazon Bedrock AgentCore, Google's Agent Development Kit, and Vercel's AI SDK harness packages that allowed tools to execute without a model turn — leaving model-level guardrails with nothing to inspect.