{"cve":"CVE-2026-115419","nvd":{"published":"2026-10-22T21:17:17.790","modified":"2026-10-23T17:17:17.303","status":"Awaiting Analysis","description":"The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id.\n\n\n\nTo mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":8.6},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","score":8.1},"cwes":["CWE-488"],"references":["https://aws.amazon.com/security/security-bulletins/2026-146-aws/","https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-4v6f-7vjh-6x4m","https://pypi.org/project/strands-agents/1.43.0/","https://www.npmjs.com/package/@strands-agents/sdk/v/1.5.0"],"products":[],"source":"nvd","synced_at":"2026-10-24T16:53:35.584907681+00:00"},"epss":{"cve":"CVE-2026-115419","score":0.00426,"percentile":0.36603,"date":"2026-10-26"},"kev":null,"osv":[{"id":"GHSA-4v6f-7vjh-6x4m","url":"https://osv.dev/vulnerability/GHSA-4v6f-7vjh-6x4m","summary":"Strands Agents SDK: Exposure of data element to wrong session in the A2A Server","modified":"2026-10-23T21:00:06.293335185Z","packages":[{"ecosystem":"PyPI","name":"strands-agents","purl":"pkg:pypi/strands-agents","ranges":["<1.43.0"],"fixed":["1.43.0"]},{"ecosystem":"npm","name":"@strands-agents/sdk","purl":"pkg:npm/%40strands-agents/sdk","ranges":["<1.5.0"],"fixed":["1.5.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}