Known vulnerabilities in aws strands-agents-tools
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-19111 | Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands… | 8.1 High | Aug 6, 2026 |
| CVE-2026-18733 | A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors… | 8.8 High | Aug 3, 2026 |