Login Request a demo
ST
Product
strands-agents-tools
by AWS · last CVE Aug 6, 2026
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 0
Severity
All severities3Critical0High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add strands-agents-tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18733
8.8
1%
Aug 3
Prompt injection bypasses shell tool consent gate in Strands Agents Tools
Affected: before 0.8.0
CVE-2026-19111
8.1
1%
Aug 6
Insecure direct object reference in Strands Agents Tools memory tool namespace isolation
Affected: before 0.8.3
CVE-2026-18394
7.4
1%
Jul 31
Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltration
Affected: before 0.8.2
Showing 3