CVE-2026-18733 - Prompt injection bypasses shell tool consent gate in Strands Agents Tools
Imported from official source
Bulletin ID: 2026-072-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/03/2026 13:30 PM PDT Description: Strands Agents is an open-source SDK for building AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the shell tool for executing operating system commands on the agent's host. We identified CVE-2026-18733. …
This version
- Version
- 1 of 1
- Recorded
- September 18, 2026 09:42
- Change
- Initial
- Content hash
2c85e5b36f44cc452c01e06f232aae72- All versions
- Revision history