🟠 High | Source: AWS Security Bulletins
A vulnerability (CVE-2026-19111) in the Strands Agents Tools package allows an attacker to manipulate the namespace parameter that controls tenant isolation in the mongodb_memory, elasticsearch_memory, and mem0_memory tools. By crafting a malicious prompt, a remote authenticated user could read, modify, or delete another tenant’s stored agent memories, or inject false memories into their namespace. The mongodb_memory and elasticsearch_memory tools also expose connection parameters, potentially enabling redirection of memory storage to an attacker-controlled cluster.
Security Architect’s Take: Upgrade strands-agents-tools to version 0.8.3 or later immediately; if upgrading is not immediately possible, treat namespace as a server-side-only value and strip it from any LLM-controlled tool schemas to prevent prompt injection abuse. Additionally, audit existing multi-tenant deployments for signs of unauthorised cross-namespace memory access.
Original advisory: CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools