CVE-2026-115419 Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-115419?
CVE-2026-115419 is a high-severity vulnerability in AWS strands-agents, published on 22 Oct 2026.
Official description
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id.
To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).
Weakness: CWE-488
Which versions are affected by CVE-2026-115419?
4 open source packages ship an affected version, including strands-agents and @strands-agents/sdk.
| Package | Affected | Fixed in |
|---|---|---|
strands-agents PyPI | All versions | 1.43.0 |
strands-agents PyPI | All versions | 1.43.0 |
@strands-agents/sdk npm | All versions | 1.5.0 |
@strands-agents/sdk npm | All versions | 1.5.0 |
How do I fix CVE-2026-115419?
Upgrade strands-agents to 1.43.0 or later.
Is CVE-2026-115419 being exploited?
There is no known exploitation of CVE-2026-115419 in the wild and no public exploit code.
Sources
Also known as GHSA-4v6f-7vjh-6x4m.