{"data":{"id":"c338b068-87a9-492b-9d22-380dee6591ff","title":"CVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl tool","summary":"CVE-2026-78379 is a consent bypass in the python_repl tool of the strands-agents-tools package, used with the Strands Agents Python SDK, in versions before 0.8.5. A crafted prompt can forward non_interactive_mode as a keyword argument through the batch tool, skipping the operator approval gate. Remote actors can then execute arbitrary Python code on the agent's host.","solution":"Fixed in 0.8.5 or later. Upgrade strands-agents-tools to version 0.8.5 or newer.","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-089-aws/","publishedAt":"2026-08-25T19:09:48.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["Strands Agents","Strands Agents Tools","python_repl tool","batch tool","Amazon Strands Agents Tools"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-08-25T19:09:48.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}