Skip to content
OpenAdvisories

Product · amazon

strands-agents-tools

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-78379

    Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

    Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted promp…

    amazon strands-agents-tools