CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

Summary

CVE-2026-115419 affects the Agent2Agent (A2A) server component of the Strands Agents SDK, which exposes an agent over HTTP. The A2A server did not properly isolate conversation state between callers, so an authenticated remote user could access another caller's conversation history or influence model behavior for other callers in multi-tenant deployments. Impacted versions are strands-agents (Python) containing the multiagent.a2a module below 1.43.0, and @strands-agents/sdk (TypeScript) below 1.5.0.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Agent-to-agent protocols

Related items

• HighCVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()Same vendor · AWS Security Bulletins
• HighCVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro CrewSame vendor · AWS Security Bulletins
• MediumCVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDKSame vendor · AWS Security Bulletins
• HighCVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRFSame vendor · AWS Security Bulletins
• HighCVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker DistributionSame vendor · AWS Security Bulletins