CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool

Summary

CVE-2026-18394 is an incorrect authorization issue in the http_request tool of strands-agents-tools, an open-source Strands Agents SDK package. The tool exposed a proxies parameter that the LLM could control, so a crafted prompt, such as one in untrusted web content the agent reads, could route a request through an actor-controlled proxy and disclose the bound credential in cleartext in the Authorization header, even though the hostname allowlist check passed. Impacted versions are below 0.8.2.

Mitigation

Fixed in 0.8.2 (impacted versions are < 0.8.2).

Related items

• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSame vendor · AWS Security Bulletins
• HighCVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypassSame vendor · AWS Security Bulletins
• MediumCVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerSame vendor · AWS Security Bulletins
• MediumCVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsSame vendor · AWS Security Bulletins
• HighCVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents ToolsSame vendor · AWS Security Bulletins