What’s Vulnerable › Products

AWS strands-agents-tools vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your AWS strands-agents-tools version is affected

Latest AWS strands-agents-tools vulnerabilities

• CVE-2026-115415 — Secret masking bypass in the environment tool in Strands Agents Tools (CVSS 6.5)
• CVE-2026-78379 — Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools (CVSS 8.1)
• CVE-2026-19111 — Insecure direct object reference in Strands Agents Tools memory tool namespace isolation (CVSS 8.1)
• CVE-2026-18733 — Prompt injection bypasses shell tool consent gate in Strands Agents Tools (CVSS 8.8)
• CVE-2026-15746 — Credential disclosure in Strands Agents Tools elasticsearch_memory tool (CVSS 6.5)