All vulnerabilities
CVE-2026-115419GHSA-4v6f-7vjh-6x4m

strands-agents: Strands Agents SDK: Exposure of data element to wrong session in the A2A Server

AWS strands-agentspipContainers & cloud
Open in ThreatlineRecord JSON
CVSS
8.6High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.34%Chance of exploitation activity in the next 30 days, higher than 26% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.43.0Also 1.5.0GitHub
Published22 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 1.43.0strands-agents, pipGitHub
  • 1.5.0@strands-agents/sdk, npmGitHubnpm install @strands-agents/sdk@1.5.0
  • 1.43.0strands-agentsCVE List
  • 1.5.0strands-agents/sdkCVE List
  • 1.43.0strands-agents, PyPIOSVpip install "strands-agents>=1.43.0"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Summary Strands Agents SDK is an open-source SDK, available for Python (strands-agents) and TypeScript (@strands-agents/sdk), for building and running AI agents. An issue exists where, under certain circumstances, the Agent2Agent (A2A) server shares conversation history across callers with different context\_id values, allowing one caller to read and influence another caller's session.

Impact The A2A server did not properly isolate conversation state between callers. In multi-tenant deployments, an authenticated remote user could access another caller's conversation history or influence model behavior for other callers (CWE-488: Unintended Disclosure of Data Element to Wrong Session). This affects any deployment where an A2A server is reachable by more than one user or tenant.

Impacted versions: strands-agents (Python): all versions containing the multiagent.a2a module, < 1.43.0 @strands-agents/sdk (TypeScript): < 1.5.0

Patches This issue has been addressed in strands-agents version 1.43.0 and @strands-agents/sdk version 1.5.0. The A2A server now uses an agent factory so conversation state is isolated per A2A context\_id. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds There is no workaround that fully addresses this issue in affected versions. Until you upgrade, do not expose an A2A server to more than one user or tenant. If multiple callers need access, run a separate A2A server instance for each user or tenant.

References If you have any questions or comments about this advisory, we ask that you contact AWS Security via our vulnerability reporting page or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.

Text from GitHub Advisory Database

Affected versions 56

  • strands-agents, pip< 1.43.0GitHub
  • @strands-agents/sdk, npm< 1.5.0GitHub
  • strands-agentsaffected: all versions before 1.43.0CVE List
  • strands-agents/sdkaffected: all versions before 1.5.0CVE List
  • strands-agents, PyPIfrom first release, fixed in 1.43.0OSV
  • strands-agents, PyPI0.0.1OSV
  • strands-agents, PyPI0.1.0OSV
  • strands-agents, PyPI0.1.1OSV
  • strands-agents, PyPI0.1.2OSV
  • strands-agents, PyPI0.1.3OSV
  • strands-agents, PyPI0.1.4OSV
  • strands-agents, PyPI0.1.5OSV
  • strands-agents, PyPI0.1.6OSV
  • strands-agents, PyPI0.1.7OSV
  • strands-agents, PyPI0.1.8OSV
  • strands-agents, PyPI0.1.9OSV
  • strands-agents, PyPI0.2.0OSV
  • strands-agents, PyPI0.2.1OSV
  • strands-agents, PyPI0.3.0OSV
  • strands-agents, PyPI1.0.0OSV
  • strands-agents, PyPI1.0.1OSV
  • strands-agents, PyPI1.1.0OSV
  • strands-agents, PyPI1.10.0OSV
  • strands-agents, PyPI1.11.0OSV
  • strands-agents, PyPI1.12.0OSV
  • strands-agents, PyPI1.13.0OSV
  • strands-agents, PyPI1.14.0OSV
  • strands-agents, PyPI1.15.0OSV
  • strands-agents, PyPI1.16.0OSV
  • strands-agents, PyPI1.17.0OSV
  • strands-agents, PyPI1.18.0OSV
  • strands-agents, PyPI1.19.0OSV
  • strands-agents, PyPI1.2.0OSV
  • strands-agents, PyPI1.20.0OSV
  • strands-agents, PyPI1.21.0OSV
  • strands-agents, PyPI1.22.0OSV
  • strands-agents, PyPI1.23.0OSV
  • strands-agents, PyPI1.24.0OSV
  • strands-agents, PyPI1.25.0OSV
  • strands-agents, PyPI1.26.0OSV
  • strands-agents, PyPI1.27.0OSV
  • strands-agents, PyPI1.28.0OSV
  • strands-agents, PyPI1.29.0OSV
  • strands-agents, PyPI1.3.0OSV
  • strands-agents, PyPI1.30.0OSV
  • strands-agents, PyPI1.31.0OSV
  • strands-agents, PyPI1.32.0OSV
  • strands-agents, PyPI1.33.0OSV
  • strands-agents, PyPI1.34.0OSV
  • strands-agents, PyPI1.34.1OSV
  • strands-agents, PyPI1.35.0OSV
  • strands-agents, PyPI1.36.0OSV
  • strands-agents, PyPI1.37.0OSV
  • strands-agents, PyPI1.38.0OSV
  • strands-agents, PyPI1.39.0OSV
  • @strands-agents/sdk, npmfrom first release, fixed in 1.5.0OSV

References 15