Prompt Injection Vulnerability in Amazon Strands Agents Tools
CVE-2026-18733

7.5HIGH

Key Information:

Vendor

Aws

Status
Strands-agents-tools
Vendor
CVE Published:
3 August 2026

What is CVE-2026-18733?

A prompt injection vulnerability exists in Amazon Strands Agents Tools prior to version 0.8.0. This flaw allows remote actors to bypass the human consent gate by executing arbitrary operating system commands through a crafted prompt with the non_interactive parameter set to true. Users are strongly advised to upgrade to version 0.8.0 to mitigate this risk.

Affected Version(s)

strands-agents-tools 0 < 0.8.0

References

https://pypi.org/project/strands-agents-tools/0.8.0/
release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-0...
vendor-advisory
https://github.com/strands-agents/tools/security/advisori...
release-notes

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.