CVE-2026-15746 - Credential disclosure in Strands Agents Tools elasticsearch_memory tool

Summary

CVE-2026-15746 is an SSRF issue in the elasticsearch_memory tool of the strands-agents-tools package for Strands Agents, an open-source Python SDK for AI agents. The tool exposed es_url, cloud_id and api_key to the LLM through its tool schema, and when api_key was omitted it fell back to the ELASTICSEARCH_API_KEY environment variable and sent it to any host the LLM specified. A crafted prompt could make the tool connect to a threat-actor-controlled server and disclose the operator's Elasticsearch API key in the Authorization header. Impacted versions are below 0.7.0.

Mitigation

Upgrade strands-agents-tools to version 0.7.0 or later. The source refers readers to the linked AWS Security Bulletin article for the most up-to-date information.

Related items

• MediumCVE-2026-108759: mistral.rs sandbox escape via symlinks in mistralrs-code-execSimilar attack · NVD/CVE Database
• MediumCVE-2026-108756: Abilityai Trinity missing authorization in Telegram router binding operationsSimilar attack · NVD/CVE Database
• LowCVE-2026-108754: GPT-Load cleartext logging exposes client proxy keys in query stringsSimilar attack · NVD/CVE Database
• InfoPrivacy Risks and Leakage Pathways in Agentic and Multi-Agent AI SystemsSimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
• MediumCVE-2026-108600: open-multi-agent link following flaw in file_write tool sandboxSimilar attack · NVD/CVE Database