Strands Agents Tools: Secret Masking Bypass Exposes Cloud Credentials

Strands Agents Tools versions 0.1.0 through 0.8.5 have a nasty vulnerability (CVE-2026-115415) where crafted prompts can trick the LLM into disabling environment variable masking. This means your cloud credentials and API keys could leak in cleartext—yikes! If you're running affected versions, update to 0.8.6 or later immediately. User action required.