The strands-agents package has a local confidentiality vulnerability in its default FileSessionManager storage. By default, session data is stored under /tmp/strands/sessions with directory and file permissions that allow other local users on shared systems to read sensitive session data. This can expose prompts, model outputs, tool inputs/outputs, intermediate states, and secrets stored in session files. The issue arises because the storage directories and files are created with permissions relying on the process umask, commonly 022, resulting in directories with 0755 and files with 0644 permissions. A fix is available in version 1.48.0 that addresses these permission issues.