CVE-2026-115419: CWE-488 Exposure of data element to wrong session in AWS strands-agents
Description
A vulnerability in the A2A server component of Amazon Strands Agents SDK for Python before 1.43.0 and TypeScript before 1.5.0 allows an authenticated remote user to access other tenants' conversation history and modify model behavior by exploiting improper isolation of conversation state between callers.
CVSS v3.1
8.1high
Affected software
AWS
strands-agents
AWS
strands-agents/sdk
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-115419 is a CWE-488 vulnerability affecting the A2A server component in Amazon Strands Agents SDK for Python versions before 1.43.0 and TypeScript versions before 1.5.0. The flaw arises because the server does not properly isolate conversation state between different callers. An authenticated remote user can send HTTP requests to the A2A endpoint using a different context_id to read other tenants' conversation histories and inject persistent instructions that alter the model's behavior for subsequent users. This vulnerability has a CVSS 3.1 score of 8.1, indicating high severity. AWS has published an advisory and released fixed versions to address this issue.
Potential Impact
An authenticated attacker can access sensitive conversation data belonging to other tenants and manipulate the model's behavior persistently, potentially compromising confidentiality and integrity of data and interactions within the affected SDK components.
Mitigation Recommendations
AWS has released fixed versions: strands-agents 1.43.0 for Python and @strands-agents/sdk 1.5.0 for TypeScript. Users should upgrade to these versions to remediate the vulnerability. Since this is a cloud service component, AWS manages remediation for the cloud-hosted service; users should verify their SDK versions and apply updates accordingly.
Technical Details
- Assigned by
- AMZN
- Reserved
- 10/22/2026
- CVSS version
- 3.1
- Is Cloud Service
- true
- Vendor Advisory Urls
- [object Object]
Threat ID: 6adc6dc15a5d48fa0dab3a92
Added to database: 10/24/2026, 08:35:13 UTC
Last enriched: 10/24/2026, 08:36:46 UTC
Last updated: 10/24/2026, 09:45:21 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.