Amazon strands-agents-tools up to 0.6.x Elasticsearch Memory Tool api_key server-side request forgery

Summaryinfo

A vulnerability was found in Amazon strands-agents-tools up to 0.6.x. It has been classified as problematic. The affected element is an unknown function of the component Elasticsearch Memory Tool. This manipulation of the argument api_key causes server-side request forgery. This vulnerability appears as CVE-2026-15746. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability has been found in Amazon strands-agents-tools up to 0.6.x and classified as problematic. Affected by this vulnerability is an unknown code block of the component Elasticsearch Memory Tool. The manipulation of the argument api_key with an unknown input leads to a server-side request forgery vulnerability. The CWE definition for the vulnerability is CWE-918. The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. As an impact it is known to affect confidentiality. The summary by CVE is:

Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified CVE-2026-15746, a server-side request forgery (SSRF) issue in the elasticsearch_memory tool. The tool exposed its connection parameters (es_url, cloud_id, api_key) as fields the large language model (LLM) could control through the tool schema. When a caller omitted the api_key parameter, the tool fell back to the operator's ELASTICSEARCH_API_KEY environment variable and sent it to whichever host the LLM specified. A crafted prompt could cause the tool to connect to a threat-actor-controlled server and disclose the operator's Elasticsearch API key in the Authorization header. We recommend you upgrade to strands-agents-tools version 0.7.0 or later. As a precautionary measure, we recommend all operators rotate their ELASTICSEARCH_API_KEY, even if there is no indication the credential was exposed.

It is possible to read the advisory at pypi.org. This vulnerability is known as CVE-2026-15746 since 07/14/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 0.7.0 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Amazon

Name

• strands-agents-tools

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion