Phantom Labs research reveals AWS Bedrock AgentCore Code Interpreter sandbox mode allows DNS queries. This flaw enables network isolation bypass.