Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-15746— Credential disclosure in Strands Agents Tools elasticsearch_memory tool

Quick assessment

Affected
Amazon strands-agents-tools
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Strands Agents Strands Agents Tools是Strands Agents组织的一款服务器支撑系统软件。 Strands Agents Tools 0.7.0之前版本存在服务端请求伪造漏洞，该漏洞源于elasticsearch_memory工具暴露了连接参数（es_url, cloud_id, api_key）供大语言模型（LLM）通过工具模式控制，导致服务端请求伪造（SSRF），当调用者省略api_key参数时，工具会回退使用操作员的ELASTICSEARCH_API_KEY环

CVSS 6.5 · Medium EPSS 0.42% · P34

Affected Version Matrix 1

VendorProduct Version RangeStatus
Amazon strands-agents-tools < 0.7.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-15746

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Credential disclosure in Strands Agents Tools elasticsearch_memory tool
Source: CVE Program / CVE List V5
Vulnerability Description
Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified CVE-2026-15746, a server-side request forgery (SSRF) issue in the elasticsearch_memory tool. The tool exposed its connection parameters (es_url, cloud_id, api_key) as fields the large language model (LLM) could control through the tool schema. When a caller omitted the api_key parameter, the tool fell back to the operator's ELASTICSEARCH_API_KEY environment variable and sent it to whichever host the LLM specified. A crafted prompt could cause the tool to connect to a threat-actor-controlled server and disclose the operator's Elasticsearch API key in the Authorization header. We recommend you upgrade to strands-agents-tools version 0.7.0 or later. As a precautionary measure, we recommend all operators rotate their ELASTICSEARCH_API_KEY, even if there is no indication the credential was exposed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Strands Agents Tools 服务端请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Strands Agents Strands Agents Tools是Strands Agents组织的一款服务器支撑系统软件。 Strands Agents Tools 0.7.0之前版本存在服务端请求伪造漏洞，该漏洞源于elasticsearch_memory工具暴露了连接参数（es_url, cloud_id, api_key）供大语言模型（LLM）通过工具模式控制，导致服务端请求伪造（SSRF），当调用者省略api_key参数时，工具会回退使用操作员的ELASTICSEARCH_API_KEY环
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Amazon strands-agents-tools 0 ~ 0.7.0 -

II. Public POCs for CVE-2026-15746

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-15746

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-15746 (2)

IV. Related Vulnerabilities

Same product: strands-agents-tools
Same vendor: Amazon
Same weakness: CWE-918

V. Comments for CVE-2026-15746

No comments yet

Leave a comment