CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools

Summary

CVE-2026-19111 is an insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools of the strands-agents-tools package for Strands Agents. Each tool uses a namespace field as its only tenant-isolation key, and the LLM could control that field through the tool schema, so a crafted prompt could forge it. A remote authenticated user could then read, modify, or delete other tenants' memories or inject false memories, and the standalone mongodb_memory and elasticsearch_memory functions could be redirected to an actor-specified cluster through exposed connection parameters. Impacted versions are below 0.8.3.

Mitigation

Fixed in 0.8.3. The source states no other mitigation, so upgrade strands-agents-tools to version 0.8.3 or later.

Related items

• HighCVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypassSame vendor · AWS Security Bulletins
• MediumCVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerSame vendor · AWS Security Bulletins
• MediumCVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsSame vendor · AWS Security Bulletins
• HighCVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents ToolsSame vendor · AWS Security Bulletins
• HighGHSA-4v6f-7vjh-6x4m: Strands Agents SDK: Exposure of data element to wrong session in the A2A ServerSame vendor · GitHub Advisory Database