Strands-agents-tools (Amazon) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-28. Vendor: Amazon.

CVEs of Strands-agents-tools

• CVE-2026-115415 - CVSS 6.5 (medium), 2026-10-28: Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the…
• CVE-2026-78379 - CVSS 9.2 (critical), 2026-08-25: Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to…
• CVE-2026-15746 - CVSS 6.9 (medium), 2026-07-15: Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the…