CVE-2026-115419High· 8.1▾ TwilightThe A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could rea…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id.
To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).
strands-agents < 1.43.0strands-agents/sdk < 1.5.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115417High· 7.5Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
CVE-2026-115414High· 7.8OS command injection in the Terraform hook in AWS SAM CLI
CVE-2026-115416High· 7.7Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-112408High· 8.1Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-112407High· 8.8Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
CVE-2026-10591High· 8.8Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths