AWS Strands Agents Tools

• CVE-2026-19111 High 8.1 Insecure direct object reference in Strands Agents Tools memory tool namespace isolation 0.5%
• CVE-2026-18733 High 8.8 Prompt injection bypasses shell tool consent gate in Strands Agents Tools 0.6%
• CVE-2026-18394 High 7.4 Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltration 0.5%