CVE-2026-115419

The Amazon Strands Agents SDK (Python version before 1.43.0 and TypeScript version before 1.5.0) contains a vulnerability in the A2A server component where conversation state is not properly isolated between callers. This flaw allows an authenticated remote user to access other tenants' conversat...

EUVD-2026-108507

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...