Advisories · Technology

amazon strands-agents-tools.

Every CVE that names amazon strands-agents-tools among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115415 CVE record

CVSS 5.9 Medium

Secret masking bypass in the environment tool in Strands Agents Tools
- amazon strands-agents-tools
- CWE-1427
Not analysed yet 28 Oct 2026
CVE-2026-78379 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools
- Amazon strands-agents-tools
- CWE-1427
Not analysed yet 25 Aug 2026
CVE-2026-15746 CVE record

CVSS 6.9 Medium

Credential disclosure in Strands Agents Tools elasticsearch_memory tool
- Amazon strands-agents-tools
- Server-side request forgery (SSRF)
Not analysed yet 15 Jul 2026