{"data":{"id":"3bab02e4-22ab-4b18-99b5-044414319582","title":"CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools","summary":"CVE-2026-19111 is an insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools of the strands-agents-tools package for Strands Agents. Each tool uses a namespace field as its only tenant-isolation key, and the LLM could control that field through the tool schema, so a crafted prompt could forge it. A remote authenticated user could then read, modify, or delete other tenants' memories or inject false memories, and the standalone mongodb_memory and elasticsearch_memory functions could be redirected to an actor-specified cluster through exposed connection parameters. Impacted versions are below 0.8.3.","solution":"Fixed in 0.8.3. The source states no other mitigation, so upgrade strands-agents-tools to version 0.8.3 or later.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-077-aws/","publishedAt":"2026-08-06T18:08:44.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Strands Agents","Strands Agents Tools","mongodb_memory","elasticsearch_memory","mem0_memory"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-08-06T18:08:44.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}