AI Recommendation Poisoning - AI Agent SSRF to Cloud Metadata

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•3

Detects an AI agent (manipulated by a poisoned recommendation prompt) attempting to access internal Cloud Metadata endpoints (e.g., AWS IMDS, Azure IMDS) to steal underlying infrastructure tokens.