Skip to content
OpenAdvisories

Product · amazon

strands-agents-tools

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-115415

    Secret masking bypass in the environment tool in Strands Agents Tools

    Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a craft…

    amazon strands-agents-tools
  • Medium 6.5
    CVE-2026-15746

    Credential disclosure in Strands Agents Tools elasticsearch_memory tool

    Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified CVE-2026-15746, a s…

    amazon strands-agents-tools