Known vulnerabilities in Amazon strands-agents-tools
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115415 | Secret masking bypass in the environment tool in Strands Agents Tools | 5.9 Medium | Oct 28, 2026 |
| CVE-2026-78379 | Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before… | 9.2 Critical | Aug 25, 2026 |
| CVE-2026-15746 | Strands Agents is an open-source Python SDK for building and running AI agents | 6.9 Medium | Jul 15, 2026 |
Other Amazon products
Amazon Athena ODBC driver 6
data.all 5
WorkSpaces Client 2
Ion-C 2
Amazon Redshift JDBC Driver 2
FreeRTOS-Plus-TCP 2
Kiro IDE 2
Fire TV Stick 3rd gen 2
amazon-connect-salesforce-lambda 1
Amazon OpenSearch Service 1
Amazon Redshift Python Connector 1
Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware 1