{"data":{"id":"f937a665-faa7-447d-b6f5-cbe38c640abd","title":"GHSA-4v6f-7vjh-6x4m: Strands Agents SDK: Exposure of data element to wrong session in the A2A Server","summary":"Strands Agents SDK, shipped as strands-agents for Python and @strands-agents/sdk for TypeScript, shares conversation history across callers with different context_id values in the Agent2Agent (A2A) server under certain circumstances. An authenticated remote user in a multi-tenant deployment can read another caller's conversation history or influence model behavior for that caller (CWE-488). Affected versions are strands-agents below 1.43.0 for Python and @strands-agents/sdk below 1.5.0 for TypeScript.","solution":"Upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript), which use an agent factory to isolate conversation state per A2A context_id. Ensure any forked or derivative code incorporates the fixes. Until upgrading, do not expose an A2A server to more than one user or tenant; if multiple callers need access, run a separate A2A server instance for each user or tenant. The source states there is no workaround that fully addresses the issue in affected versions.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-4v6f-7vjh-6x4m","publishedAt":"2026-10-23T20:48:29.000Z","cveId":"CVE-2026-115419","cweIds":["CWE-488"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["strands-agents@< 1.43.0 (fixed: 1.43.0)","@strands-agents/sdk@< 1.5.0 (fixed: 1.5.0)"],"affectedPackageNames":["strands-agents","@strands-agents/sdk"],"affectedPackageRefs":["pypi:strands-agents","npm:@strands-agents/sdk"],"affectedVendors":["Amazon"],"affectedVendorsRaw":["Strands Agents SDK","strands-agents","@strands-agents/sdk","Agent2Agent (A2A) server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0034,"epssCheckedAt":"2026-10-25T00:09:45.813Z","kevDateAdded":null,"advisoryAliases":["GHSA-4v6f-7vjh-6x4m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-23T20:48:29.000Z","capecIds":null,"crossRefCount":1,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}