CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

Imported from official source

Security notice

Cybersecurity Open Source Classified by Officially

Bulletin ID: 2026-146-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 13:00 PM PDT Description: Strands Agents is an open-source SDK, available for Python and TypeScript, for building AI agents. The SDK includes an Agent2Agent (A2A) server component that exposes an agent over HTTP so other agents and clients can call it. …

This is an extract. The publication continues at the source.

Read the original at the source: https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/

Officially imported this from Amazon Web Services’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Amazon Web Services — imported from official source
Official source
https://aws.amazon.com/security/security-bulletins/feed/ RSS
Imported
October 22, 2026 21:00
Versions
1 recorded
Identity
93aba748ac2216a59e2d111811741cccfcf58a8e

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.