EUVD-2026-108507

Strands Agents SDK: Exposure of data element to wrong session in the A2A Server...

CVE-2026-115419

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...

CVE-2026-115419

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...

CVE-2026-115419 Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...

CVE-2026-115419 Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...

CVE-2026-115419

The Amazon Strands Agents SDK (Python version before 1.43.0 and TypeScript version before 1.5.0) contains a vulnerability in the A2A server component where conversation state is not properly isolated between callers. This flaw allows an authenticated remote user to access other tenants' conversat...

PT-2026-121658

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents SDK for Python versions prior to 1.43.0 Amazon Strands Agents SDK for TypeScript versions prior to 1.5.0 Description The A2A server component fails to properly isolate conversation state between callers. An authenticated...

CVE-2026-78379

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

CVE-2026-78379

Amazon Strands Agents Tools (prior to 0.8.5 ) is affected by an improper input neutralization flaw in its python_repl tool. A remote attacker can craft a prompt that forwards the non_interactive_mode keyword argument through the batch tool, thereby bypassing the human consent gate and achieving a...

CVE-2026-78379: Undefined Security Weakness

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

PT-2026-68680

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.3 Description An insecure direct object reference exists in the mongodb memory, elasticsearch memory, and mem0 memory tools. Remote authenticated users can access, modify, or delete memories...

CVE-2026-19111: Authorization Bypass Through User-Controlled Key

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...

CVE-2026-18733

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the noninteractive parameter to true, bypassing the human consent gate. To...

CVE-2026-18733: Undefined Security Weakness

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the noninteractive parameter to true, bypassing the human consent gate. To...