ZDF
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2026-115419

CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

Published Oct 22, 2026 · catalog updated Oct 22, 2026 · Amazon Web Services

Last checked Nov 5, 2026. A connected source was read within the last 7 days.

Check if you run it

No confirmed exploitation is on record for CVE-2026-115419. EPSS is 0.43%. Act only if a listed version of Amazon Web Services is installed.

Gaps on this record

  • No version range is stored. A customer cannot check an installed version against this record.
  • No vendor fix or required action is stored. Compare the linked advisory before you change production.
Severity
High8.1
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.43%
Remediation
Advisory link
Affected products
npm @strands-agents · package npm · package pip · pypi strands-agents · vendor AWS strands-agents · vendor AWS strands-agents/sdk

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id. To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • npm @strands-agentsversion unspecified
  • package npmversion unspecified
  • package pipversion unspecified
  • pypi strands-agentsversion unspecified
  • vendor AWS strands-agentsversion unspecified
  • vendor AWS strands-agents/sdkversion unspecified

How to fix CVE-2026-115419

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

No confirmed exploitation is on record for CVE-2026-115419. EPSS is 0.43%. Act only if a listed version of Amazon Web Services is installed.

Which versions are affected?

Affected version ranges are not on this record. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

CWE-488. EPSS 0.43%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 22, 2026 · AWS Security Bulletins

    Detected

    Bulletin ID: 2026-146-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 13:00 PM PDT Description: Strands Agents is an open-source SDK, available for Python and TypeScript, for building AI agents. The SDK includes an Agent2Agent (A2A) server component that exposes an agent over HTTP so other agents and clients can call it. We identified CVE-2026-115419, an is

Sources

  • AWS Security BulletinsVendor advisoryCVE-2026-115419

    Read this article

    aws.amazon.com
  • CVE.orgVulnerability recordCVE-2026-115419

    The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and a

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-115419

    30-day exploitation probability 0.43%

    first.org
  • GitLab Advisory DatabasePackage advisoryCVE-2026-115419

    Summary Strands Agents SDK is an open-source SDK, available for Python (strands-agents) and TypeScript (@strands-agents/sdk), for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent (A2A) server shares conversation history across callers with different context_id values, allowing one caller to read and influence another caller's session. Impact The A

    advisories.gitlab.com
  • Snyk Vulnerability DatabasePackage advisorySNYK-JS-STRANDSAGENTSSDK-21460720

    Exposure of Data Element to Wrong Session

    security.snyk.io
  • Snyk Vulnerability DatabasePackage advisorySNYK-PYTHON-STRANDSAGENTS-21460719

    Exposure of Data Element to Wrong Session

    security.snyk.io

References

Freshness

Last verified in this catalog Nov 3, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.

  • AWS Security BulletinsNov 5, 2026
  • FIRST EPSSNov 3, 2026
  • GitLab Advisory DatabaseOct 27, 2026
  • Snyk Vulnerability DatabaseOct 26, 2026
  • Snyk Vulnerability DatabaseOct 26, 2026
  • CVE.orgOct 23, 2026