CVE-2026-18733highCWE-1427

CVE-2026-18733: high-severity vulnerability in AWS strands-agents-tools

Prompt injection bypasses shell tool consent gate in Strands Agents Tools

Published · Updated

Follow this CVE+ Monitor strands-agents-tools

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.6%
A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system commands on the agent's host via a crafted prompt that sets the non_interactive parameter to true, bypassing the human consent gate. To remediate this issue, users should upgrade to version 0.8.0.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
AWS · strands-agents-tools
Related CVEs — AWS strands-agents-tools

In the same product, most dangerous first.

CVE-2026-19111HIGHInsecure direct object reference in Strands Agents Tools memory tool namespace isolationEPSS 0.5%