strands-agents-tools vulnerabilities

CVEs whose affected-version data names the strands-agents-tools package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115415Medium· 6.5

1w ago

Secret masking bypass in the environment tool in Strands Agents Tools

Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and…

▾ Sunlitamazon · strands-agents-toolsEPSS 0.34%via CVEORG