{"data":{"id":"debc845d-9902-47e4-9e26-d181f099e420","title":"CVE-2026-15746: Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package…","summary":"CVE-2026-15746 is a server-side request forgery (SSRF) issue in the elasticsearch_memory tool of the strands-agents-tools package, which ships with the Strands Agents Python SDK. The tool exposed es_url, cloud_id and api_key as fields the LLM could control through the tool schema. When api_key was omitted, the tool fell back to the operator's ELASTICSEARCH_API_KEY environment variable and sent it to a host the LLM specified, so a crafted prompt could leak that key to an attacker-controlled server in the Authorization header.","solution":"Upgrade strands-agents-tools to version 0.7.0 or later. As a precaution, rotate ELASTICSEARCH_API_KEY, even without evidence that it was exposed.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-15746","publishedAt":"2026-07-15T19:16:57.773Z","cveId":"CVE-2026-15746","cweIds":["CWE-918"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Strands Agents","strands-agents-tools","elasticsearch_memory"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Strands Agents elasticsearch_memory tool SSRF exposing Elasticsearch API key","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00423,"epssCheckedAt":"2026-10-14T18:05:58.877Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:46:37.142Z","patchAvailable":null,"disclosureDate":"2026-07-15T19:16:57.773Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null}}