AWS Strands Agents Tools Exposed to Multiple CVEs in 23 Days

Between July 15 and August 6, 2026, four CVEs were disclosed in AWS Strands Agents Tools that allow attackers to manipulate LLM-controllable parameters and perform credential exfiltration, proxy hijacking, arbitrary command execution, and tenant-memory forgery; affected components include elasticsearch_memory and http_request. The flaws (CVSS 6.5–8.8) pose significant risk to cloud, fintech, and crypto/DeFi infrastructures; remediations have been implemented but the root cause is a systemic design and agent identity governance problem in LLM-integrated systems.