CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

Summary

CVE-2026-115415 affects the environment tool in Strands Agents Tools, versions >= 0.1.0 and < 0.8.6. The tool accepted a masking parameter from the LLM through its tool schema, so a crafted prompt in content the agent processes could turn masking off and return the host's environment variables in cleartext, including cloud credentials and API keys, without operator consent.

Mitigation

Fixed in 0.8.6 or later. Refer to AWS Security Bulletin 2026-154-AWS for the most up-to-date and complete information.

Related items

• HighGHSA-4v6f-7vjh-6x4m: Strands Agents SDK: Exposure of data element to wrong session in the A2A ServerSame vendor · GitHub Advisory Database
• MediumCVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP ServerSame vendor · AWS Security Bulletins
• HighCVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerSame vendor · AWS Security Bulletins
• HighCVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()Same vendor · AWS Security Bulletins
• HighCVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro CrewSame vendor · AWS Security Bulletins