CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
Description
CVE-2026-115419 is a vulnerability in the Strands Agents SDK's Agent2Agent (A2A) server component that causes unintended disclosure of conversation state between different authenticated users. This flaw allows an authenticated remote user to access another caller's conversation history or influence model behavior for other callers in multi-tenant deployments. The issue affects all Python versions containing the multiagent.a2a module prior to 1.43.0 and TypeScript SDK versions prior to 1.5.0. The vulnerability requires attention as it compromises data isolation in multi-tenant environments.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Strands Agents SDK, an open-source framework for building AI agents in Python and TypeScript, includes an A2A server component that exposes agents over HTTP. CVE-2026-115419 arises because the A2A server does not properly isolate conversation state between different callers. Consequently, an authenticated user can access conversation histories or influence other users' model behavior in multi-tenant deployments. This affects all Python versions with the multiagent.a2a module before 1.43.0 and TypeScript SDK versions before 1.5.0.
Potential Impact
The vulnerability enables authenticated remote users to access sensitive conversation histories of other users and potentially manipulate model behavior for others in multi-tenant deployments. This compromises confidentiality and integrity of user data and AI agent interactions within the affected SDK versions.
Mitigation Recommendations
Users should upgrade to strands-agents Python SDK version 1.43.0 or later and @strands-agents/sdk TypeScript version 1.5.0 or later where the issue is fixed. Since this is a software vulnerability in open-source SDKs, applying these official updates is the recommended remediation.
Technical Details
- Classification
- {"confidence":0.88,"severitySource":"default","classifier":"rss-v2"}
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/","fetched":true,"fetchedAt":"2026-10-22T20:16:20.937Z","wordCount":224}
Threat ID: 6ada6f154d27ba8daa7990a9
Added to database: 10/22/2026, 20:16:21 UTC
Last enriched: 10/22/2026, 20:16:25 UTC
Last updated: 10/22/2026, 21:16:37 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.