Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...