amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +4 more potentially affected by CVE-2026-78379 via strands-agents-tools (>=0.1.9, <=0.2.22)

strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-78379 Source advisory: SNYK:PYTHON-STRANDSAGENTSTOOLS-19329790...

Improper Neutralization of Input Used for LLM Prompting

Overview strands-agents-tools is an A collection of specialized tools for Strands Agents Affected versions of this package are vulnerable to Improper Neutralization of Input Used for LLM Prompting via the pythonrepl function in src/strandstools/pythonrepl.py. An attacker can execute arbitrary...

CVE-2026-78379

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

EUVD-2026-65735

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

CVE-2026-78379 Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

CVE-2026-78379

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

CVE-2026-78379 Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +4 more potentially affected by CVE-2026-78379 via strands-agents-tools (>=0.1.9, <=0.2.22)

strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-78379 Source advisory: MEND:CVE-2026-78379...

CVE-2026-78379: Undefined Security Weakness

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

PT-2026-81489

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.5 Description Improper neutralization of input used for Large Language Model LLM prompting in the python repl tool allows remote actors to execute arbitrary Python code on the agent's host. Thi...

Authorization Bypass Through User-Controlled Key

Overview strands-agents-tools is an A collection of specialized tools for Strands Agents Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the namespace parameter in the mongodbmemory, elasticsearchmemory, and mem0memory tools. An attacker ca...

amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +4 more potentially affected by CVE-2026-19111 via strands-agents-tools (>=0.1.9, <=0.2.22)

strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-19111 Source advisory: SNYK:PYTHON-STRANDSAGENTSTOOLS-18592366...

amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +4 more potentially affected by CVE-2026-19111 via strands-agents-tools (>=0.1.9, <=0.2.22)

strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-19111 Source advisory: MEND:CVE-2026-19111...

EUVD-2026-54214

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...

PT-2026-68680

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.3 Description An insecure direct object reference exists in the mongodb memory, elasticsearch memory, and mem0 memory tools. Remote authenticated users can access, modify, or delete memories...

CVE-2026-19111: Authorization Bypass Through User-Controlled Key

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...

amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +4 more potentially affected by CVE-2026-18733 via strands-agents-tools (>=0.1.9, <=0.2.22)

strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-18733 Source advisory: SNYK:PYTHON-STRANDSAGENTSTOOLS-18533189...

amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +4 more potentially affected by CVE-2026-18733 via strands-agents-tools (>=0.1.9, <=0.2.22)

strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-18733 Source advisory: MEND:CVE-2026-18733...

CVE-2026-18733 Prompt injection bypasses shell tool consent gate in Strands Agents Tools

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the noninteractive parameter to true, bypassing the human consent gate. To...

EUVD-2026-52432

A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the noninteractive parameter to true, bypassing the human consent gate. To...