{"data":{"id":"163a2a11-3bd4-4e6c-8a48-96d7fead645d","title":"CVE-2026-18733: A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote…","summary":"Amazon Strands Agents Tools before 0.8.0 contains a prompt injection vulnerability in its shell tool. A crafted prompt that sets the non_interactive parameter to true bypasses the human consent gate, allowing remote actors to execute arbitrary operating system commands on the agent's host. The CNA, AMZN, rates it CVSS 4.0 7.5 (HIGH), and NVD has not yet provided an assessment.","solution":"To remediate this issue, users should upgrade to version 0.8.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18733","publishedAt":"2026-08-03T21:16:37.963Z","cveId":"CVE-2026-18733","cweIds":null,"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Amazon Strands Agents Tools"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Amazon Strands Agents Tools prompt injection in shell tool","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00572,"epssCheckedAt":"2026-11-04T18:09:14.469Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-02T06:10:37.116Z","patchAvailable":null,"disclosureDate":"2026-08-03T21:16:37.963Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}