Known vulnerabilities in Amazon strands-agents-tools
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115415 | Secret masking bypass in the environment tool in Strands Agents Tools | 5.9 Medium | Oct 28, 2026 |
| CVE-2026-78379 | Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before… | 9.2 Critical | Aug 25, 2026 |
| CVE-2026-15746 | Strands Agents is an open-source Python SDK for building and running AI agents | 6.9 Medium | Jul 15, 2026 |