CVE-2026-115415

Secret masking bypass in the environment tool in Strands Agents Tools

State: Published
Severity: 5.9 Medium
Published: Oct 28, 2026
Updated: Oct 28, 2026
Reserved: Oct 22, 2026

Description

Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's secret masking.

To remediate this issue, users should upgrade to version 0.8.6 or later and rotate any credentials that were present in the environment of agents that loaded the environment tool.

Scores

CVSS	Score	Vector	Source
4.0	5.9 Medium	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	AMZN
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	AMZN

Weaknesses

CWE-1427 Improper neutralization of input used for LLM prompting

Affected Products

Product	Versions
strands-agents-toolsamazon	0.1.0 to before 0.8.6Affected

References

https://github.com/strands-agents/tools/releases#release-v0.8.6patchrelease-notes
https://aws.amazon.com/security/security-bulletins/2026-154-aws/vendor-advisory
https://github.com/strands-agents/tools/security/advisories/GHSA-qjx4-hg6g-2f34vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.