CVE-2026-19111

Insecure direct object reference in Strands Agents Tools memory tool namespace isolation

State: Published
Severity: 8.6 High
Published: Aug 6, 2026
Updated: Aug 7, 2026
Reserved: Aug 6, 2026

Description

Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a forged namespace parameter.

To remediate this issue, users should upgrade to version 0.8.3.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N	AMZN
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	AMZN

Weaknesses

CWE-639 Authorization bypass through User-Controlled key

Affected Products

Product	Versions
strands-agents-toolsAWS	before 0.8.3Affected

References

https://pypi.org/project/strands-agents-tools/0.8.3/release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-077-aws/vendor-advisory
https://github.com/strands-agents/tools/security/advisories/GHSA-mpxq-953j-42m4release-notes

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.