Authorization Bypass Through User-Controlled Key

Overview strands-agents-tools is an A collection of specialized tools for Strands Agents Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the namespace parameter in the mongodbmemory, elasticsearchmemory, and mem0memory tools. An attacker ca...

CVE-2026-19111: Authorization Bypass Through User-Controlled Key

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...