Lucene search
+L

1 matches found

OSV
OSV
added 2 days ago15 views

CVE-2026-19111 Insecure direct object reference in Strands Agents Tools memory tool namespace isolation

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...

8.6CVSS5.5AI score
SaveExploits0References5
Rows per page
Query Builder