AWS Strands Agents Tools vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting AWS Strands Agents Tools: 3 record(s), with affected versions and fixes.
CVE-2026-19111
High · 8.1
CWE-639 Aug 6, 2026
Insecure direct object reference in Strands Agents Tools memory tool namespace isolation
Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a forged namespace parameter.
To remediate this issue, users should upgrade to version 0.8.3.
CVE-2026-18733
High · 8.8
Aug 3, 2026
Prompt injection bypasses shell tool consent gate in Strands Agents Tools
A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the non_interactive parameter to true, bypassing the human consent gate.
To remediate this issue, users should upgrade to version 0.8.0.
CVE-2026-18394
High · 7.4
CWE-863 Jul 31, 2026
Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltration
Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attackers to obtain credentials configured via HTTP_REQUEST_TOKEN_CONFIG by influencing the LLM to route requests through actor-controlled proxy infrastructure.
To remediate this issue, users should upgrade to version 0.8.2.