The Green Agent POV: Formulating the Fix for an Exposed Container with Sensitive Data Access

Wiz describes how its Green Agent investigated a critical Issue involving an internet-facing EKS container with CVE-2026-111497 ("Broccoli2Shell"), an overprivileged IAM role, and S3 buckets holding over 5,000 unmasked PII and credit card records. The agent validated each link in the attack path, traced runtime assets back to their Dockerfiles, Terraform, and GitOps manifests to identify owners, and produced Mitigate and Fix plans while rejecting strategies like deleting the ingress that would cause a production outage.