Insufficient Isolation in Amazon Strands Agents SDK for Python and TypeScript
CVE-2026-115419

8.6HIGH

Key Information:

Vendor

Aws

Status
Strands-agents
Strands-agents/sdk
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115419?

The A2A server component within the Amazon Strands Agents SDK for Python (versions prior to 1.43.0) and TypeScript (versions prior to 1.5.0) presents a significant flaw in conversation state isolation. This vulnerability permits an authenticated remote user to access conversation histories belonging to other tenants, as well as make persistent modifications to model behavior for future interactions. This is achieved through HTTP requests directed towards the A2A endpoint with an alternate context_id, posing a risk to the integrity of data exchanges and user privacy. To safeguard against this issue, users are advised to upgrade to the mentioned secure versions of the SDK.

Affected Version(s)

strands-agents 0 < 1.43.0

strands-agents/sdk 0 < 1.5.0

References

https://pypi.org/project/strands-agents/1.43.0/
release-notespatch
https://www.npmjs.com/package/@strands-agents/sdk/v/1.5.0
release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-1...
vendor-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.