Advisories · Technology

AWS strands-agents-tools.

Every CVE that names AWS strands-agents-tools among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19111 CVE record

CVSS 8.6 High

Insecure direct object reference in Strands Agents Tools memory tool namespace isolation
- AWS strands-agents-tools
- Broken access control
Not analysed yet 6 Aug 2026
CVE-2026-18733 CVE record

CVSS 7.5 High

Prompt injection bypasses shell tool consent gate in Strands Agents Tools
- AWS strands-agents-tools
- CWE-1427
Not analysed yet 3 Aug 2026
CVE-2026-18394 CVE record

CVSS 6.9 Medium

Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltration
- AWS Strands Agents Tools
- Broken access control
Not analysed yet 31 Jul 2026