Strands Agents SDK A2A Server Leaks Data Between Sessions
Strands Agents SDK (Python < 1.43.0, TypeScript < 1.5.0) has a critical session isolation bug in its Agent2Agent server. Authenticated users could peek at other callers' conversation history or mess with their AI behavior in multi-tenant setups. If you're running these versions, update immediately—this one's a must-fix.
source: [aws/security-bulletin]