🔶 Authorization Bypass in Amazon Quick: Unauthorized AI Chat Agent Usage

An authorization bypass in Amazon Quick's AI Chat Agents that allowed users to access and interact with AI agents despite explicit administrative restrictions. AWS responded by deploying a fix without notifying customers, classified the issue as “none,” and did not publish an advisory.

https://www.fogsecurity.io/blog/authorization-bypass-in-amazon-quick-ai-agents

#aws