81 matches found
CVE-2026-115415
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...
CVE-2026-115415 Secret masking bypass in the environment tool in Strands Agents Tools
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...
CVE-2026-115415
The Strands Agents Tools software, in versions prior to 0.8.6 , contains an improper neutralization of input used for LLM prompting within the environment tool . This vulnerability allows remote actors to bypass the tool's secret masking functionality using a crafted prompt. Successful exploitati...
EUVD-2026-112407
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...
CVE-2026-115415
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...
CVE-2026-115415 Secret masking bypass in the environment tool in Strands Agents Tools
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...
amazon-nova-act-mcp (>=1.0.60.0, <=1.20260527102944.0), gherkai-worker-novaact (>=1.4.0, <=1.4.9) +5 more potentially affected by CVE-2026-115415 via strands-agents-tools (>=0.1.9, <=0.2.22)
strands-agents-tools PYPI version =0.1.9, =1.0.60.0, =1.4.0, =2.3.18.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6 Source cves: CVE-2026-115415 Source advisory: MEND:CVE-2026-115415...
CVE-2026-115415: Undefined Security Weakness
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's...
PT-2026-129166
Name of the Vulnerable Software and Affected Versions Strands Agents Tools versions prior to 0.8.6 Description Improper neutralization of input used for LLM prompting in the environment tool allows remote actors to obtain the agent host's environment variables in cleartext, including cloud...
Strands Agents Tools prompt injection vulnerability
Versions of Strands Agents Tools prior to 0.8.6 contain a prompt injection vulnerability. This flaw stems from improper handling of inputs used in LLM prompts within the environment tool; it may allow remote attackers to disable the tool’s confidential masking via specially crafted prompts. As a...
GHSA-3W55-933P-8PV5 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...
Symlink Attack
Overview strands-agents is an A model-driven approach to building AI agents in just a few lines of code Affected versions of this package are vulnerable to Symlink Attack via FileSessionManager.writefile in filesessionmanager.py, where the temporary file used during atomic writes was written to a...
GHSA-763V-5PJM-FX36 Strands Agents: Default FileSessionManager storage is world-readable on shared systems
There is a local confidentiality issue in the default FileSessionManager storage behavior. By default it writes session data under /tmp/strands/sessions and relies on the process umask for directory and file permissions. On systems using the common umask 022, the session directories are 0755 and...
Strands Agents: Default FileSessionManager storage is world-readable on shared systems
There is a local confidentiality issue in the default FileSessionManager storage behavior. By default it writes session data under /tmp/strands/sessions and relies on the process umask for directory and file permissions. On systems using the common umask 022, the session directories are 0755 and...
Incorrect Default Permissions
Overview strands-agents is an A model-driven approach to building AI agents in just a few lines of code Affected versions of this package are vulnerable to Incorrect Default Permissions via FileSessionManager in strands/session/filesessionmanager.py, where the readfile and writefile methods do no...
Strands Agents SDK: Exposure Of Data Element To Wrong Session In The A2A Server
Summary Strands Agents SDK is an open-source SDK, available for Python strands-agents and TypeScript @strands-agents/sdk, for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent A2A server shares conversation history across callers with different...
GHSA-4V6F-7VJH-6X4M Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
Summary Strands Agents SDK is an open-source SDK, available for Python strands-agents and TypeScript @strands-agents/sdk, for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent A2A server shares conversation history across callers with different...
EUVD-2026-108507
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server...
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
Summary Strands Agents SDK is an open-source SDK, available for Python strands-agents and TypeScript @strands-agents/sdk, for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent A2A server shares conversation history across callers with different...