CVE-2026-115419 · GHSA-4v6f-7vjh-6x4m
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
- Risk score
- 59/100
- CVSS
- 8.1 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter m…
- Affected
- strands-agents (pip) < 1.43.0; @strands-agents/sdk (npm) < 1.5.0
- Fix
- Upgrade strands-agents to 1.43.0; @strands-agents/sdk to 1.5.0 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.1 high
- On your watchlist: npm, PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| strands-agents | pip | < 1.43.0 | 1.43.0 |
| @strands-agents/sdk | npm | < 1.5.0 | 1.5.0 |
References
- https://aws.amazon.com/security/security-bulletins/2026-146-aws/
- https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-4v6f-7vjh-6x4m
- https://pypi.org/project/strands-agents/1.43.0/
- https://www.npmjs.com/package/@strands-agents/sdk/v/1.5.0
- https://github.com/advisories/GHSA-4v6f-7vjh-6x4m
- https://nvd.nist.gov/vuln/detail/CVE-2026-115419
- https://github.com/strands-agents/harness-sdk/pull/2628
- https://github.com/strands-agents/harness-sdk/pull/2696
- https://github.com/strands-agents/harness-sdk/commit/398343faad0e485f2e441dab70355c9a52382537
- https://github.com/strands-agents/harness-sdk/commit/403d87847e738e1c73909858d989cedcb67f0afa
Original description
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id. To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).
Last activity 23 Oct 2026. Patch Forecast updates every hour.