{"data":{"id":"6c26b474-7a9d-462c-8525-5dfb0e942a1e","title":"CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool","summary":"CVE-2026-18394 is an incorrect authorization issue in the http_request tool of strands-agents-tools, an open-source Strands Agents SDK package. The tool exposed a proxies parameter that the LLM could control, so a crafted prompt, such as one in untrusted web content the agent reads, could route a request through an actor-controlled proxy and disclose the bound credential in cleartext in the Authorization header, even though the hostname allowlist check passed. Impacted versions are below 0.8.2.","solution":"Fixed in 0.8.2 (impacted versions are < 0.8.2).","labels":["security","industry"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-069-aws/","publishedAt":"2026-07-31T19:41:06.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS","Strands Agents","strands-agents-tools","http_request tool"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-07-31T19:41:06.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}