{"data":{"id":"3bab02e4-22ab-4b18-99b5-044414319582","title":"CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools","summary":"Strands Agents, an open-source SDK for building AI agents, has a vulnerability in its memory tools (mongodb_memory, elasticsearch_memory, and mem0_memory) where the namespace field (the key that separates data between different users) is exposed as a parameter that the LLM can control. An attacker could craft a prompt injection (tricking the AI by hiding instructions in its input) to forge a namespace and read, modify, or delete memories belonging to other users, or inject false memories into another user's data.","solution":"Update strands-agents-tools to version 0.8.3 or later. The bulletin states 'Impacted versions: < 0.8.3', indicating the vulnerability is fixed in version 0.8.3 and above.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-077-aws/","publishedAt":"2026-08-06T18:08:44.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["Strands Agents","strands-agents-tools"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-06T18:08:44.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}