Product by Amazon

    Strands-agents-tools

    3 known vulnerabilities in Strands-agents-tools (Amazon), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Strands-agents-tools (Amazon)
    CriticalCVE-2026-78379

    Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

    8.1
    MediumCVE-2026-115415

    Secret masking bypass in the environment tool in Strands Agents Tools

    6.5
    MediumCVE-2026-15746

    Credential disclosure in Strands Agents Tools elasticsearch_memory tool

    6.5

    All products by Amazon