Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/06 6:03 p.m.36 views

CVE-2026-19111 Insecure direct object reference in Strands Agents Tools memory tool namespace isolation

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...

8.6CVSS0.0037EPSS
SaveExploits0References3
Rows per page
Query Builder