Vulnerabilities
AWS Fixes Auth Bypass in Strands Agents Tools via CVE-2026-18394
Amazon resolved a credential-leak flaw in its open-source AI agent SDK that allowed prompts to hijack HTTP requests through unauthorized proxies.
Strands Agents
Everything Threat Times has reported about Strands Agents: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AWS patches credential leak in Strands Agents elasticsearch_memory tool
An SSRF flaw in the open-source SDK allowed LLMs to exfiltrate Elasticsearch API keys to attacker-controlled servers.