CVE-2026-115419: Strands Agents SDK: Exposure of data element to wrong session in the A2A Server

CVE-2026-115419 · Severity: high · CVSS 8.1 · Published 2026-10-22

Strands Agents is an open-source SDK for building AI agents, including an Agent2Agent (A2A) server component that exposes agents over HTTP for inter-agent communication. A flaw in session isolation allows authenticated users to access other callers' conversation history and influence model behavior in multi-tenant deployments, potentially exposing sensitive conversation data and enabling unauthorized influence over agent decisions.

Technologies: Amazon AWS, strands-agents (PyPI). Vendors: Amazon, npm, PyPI.

Quick answers

Is CVE-2026-115419 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-115419 being exploited in the wild.
How severe is CVE-2026-115419?
High severity, with a CVSS score of 8.1, published 22 October 2026.
Which products and versions are affected?
@strands-agents/sdk (npm) < 1.5.0, SEMVER:introduced=0,fixed=1.5.0; strands-agents (PyPI) < 1.43.0, ECOSYSTEM:introduced=0,fixed=1.43.0; Strands Agents SDK (Python) all versions with multiagent.a2a module prior to 1.43.0; Strands Agents SDK (TypeScript) prior to 1.5.0.
Is there a fix for CVE-2026-115419?
Yes. @strands-agents/sdk (npm): upgrade to 1.5.0 or later; strands-agents (PyPI): upgrade to 1.43.0 or later. Until then: Until upgrading, do not expose an A2A server to more than one user or tenant. If multiple callers require access, run a separate A2A server instance for each user or tenant. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-115419 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-115419?
Check whether you run Amazon AWS, @strands-agents/sdk (npm), strands-agents (PyPI) or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • @strands-agents/sdk (npm): upgrade to 1.5.0 or later
    npm install @strands-agents/sdk@1.5.0
  • strands-agents (PyPI): upgrade to 1.43.0 or later
    pip install "strands-agents>=1.43.0"

Until upgrading, do not expose an A2A server to more than one user or tenant. If multiple callers require access, run a separate A2A server instance for each user or tenant.

Technical details

The A2A server component failed to properly isolate conversation state between different callers, allowing an authenticated remote attacker to access another caller's conversation history or manipulate model behavior for other sessions. The vulnerability affects all Python versions with the multiagent.a2a module prior to 1.43.0 and TypeScript versions prior to 1.5.0. The fix isolates conversation state per A2A context_id.

Affected products

  • Strands Agents SDK (Python) all versions with multiagent.a2a module prior to 1.43.0
  • Strands Agents SDK (TypeScript) prior to 1.5.0

Identifiers

  • CVE-2026-115419
  • GHSA-4v6f-7vjh-6x4m

Timeline

  • 2026-10-22: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.