{"data":{"id":"163a2a11-3bd4-4e6c-8a48-96d7fead645d","title":"CVE-2026-18733: A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors","summary":"A prompt injection vulnerability (tricking an AI by hiding instructions in its input) in the shell tool of Amazon Strands Agents Tools before version 0.8.0 allows attackers to run arbitrary operating system commands on the agent's host computer by crafting a prompt that sets the non_interactive parameter to true, which bypasses the requirement for human approval.","solution":"Users should upgrade to version 0.8.0 of Amazon Strands Agents Tools.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18733","publishedAt":"2026-08-03T21:16:37.963Z","cveId":"CVE-2026-18733","cweIds":null,"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Amazon","Amazon Strands Agents Tools"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-03T21:16:37.963Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0051"]}}