{"data":{"id":"315e403d-b365-4add-b8c2-c4ba6fd5b4d1","title":"CVE-2026-18733 - Prompt injection bypasses shell tool consent gate in Strands Agents Tools","summary":"CVE-2026-18733 affects the shell tool in the strands-agents-tools package for Strands Agents, an open-source SDK for building AI agents, in versions below 0.8.0. The tool's input schema exposed a non_interactive parameter that the LLM could control, so a crafted prompt, including one delivered through untrusted content the agent reads, could set it to true. This bypasses the operator consent gate and allows arbitrary operating system commands to run on the agent's host without approval.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-072-aws/","publishedAt":"2026-08-03T20:38:42.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Strands Agents","Strands Agents Tools"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-08-03T20:38:42.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}