CVE-2026-115419

HIGH

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id. To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).

CVSS v3.1 Score

8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Published: 10/22/2026Modified: 10/22/2026

Related Intelligence (1)

LOWAi

CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

<p><b>Bulletin ID:</b> 2026-146-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 10/22/2026 13:00 PM PDT</p> <p><b>Description:</b></p> <p>Strands Agents is an open-source SDK, available for Python and TypeScript, for building AI agents. The SDK includes an Agent2Agent (A2A) server component that exposes an agent over HTTP so other agen

CVE-2026-115419
AWS Security Bulletins

References (4)

https://aws.amazon.com/security/security-bulletins/2026-146-aws/https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-4v6f-7vjh-6x4mhttps://pypi.org/project/strands-agents/1.43.0/https://www.npmjs.com/package/@strands-agents/sdk/v/1.5.0