CVE-2026-18733

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:29+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfzvftr23...

CVE-2026-18733

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the noninteractive parameter to true, bypassing the human consent gate. To...