{"data":{"id":"ab39eb54-3dc6-4506-b492-ca9f20a6e4f6","title":"CVE-2026-15746 - Credential disclosure in Strands Agents Tools elasticsearch_memory tool","summary":"CVE-2026-15746 is an SSRF issue in the elasticsearch_memory tool of the strands-agents-tools package for Strands Agents, an open-source Python SDK for AI agents. The tool exposed es_url, cloud_id and api_key to the LLM through its tool schema, and when api_key was omitted it fell back to the ELASTICSEARCH_API_KEY environment variable and sent it to any host the LLM specified. A crafted prompt could make the tool connect to a threat-actor-controlled server and disclose the operator's Elasticsearch API key in the Authorization header. Impacted versions are below 0.7.0.","solution":"Upgrade strands-agents-tools to version 0.7.0 or later. The source refers readers to the linked AWS Security Bulletin article for the most up-to-date information.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-056-aws/","publishedAt":"2026-07-15T18:49:07.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Strands Agents","Strands Agents Tools","elasticsearch_memory tool","Elasticsearch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-07-15T18:49:07.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"]}}