tag: prompt injection

Strands Agents Tools versions below 0.8.0 have a critical vulnerability (CVE-2026-18733) where prompt injection can bypass the shell tool's consent gate. An attacker can craft prompts—like those hidden in untrusted content—to set the non_interactive parameter to true, letting arbitrary OS commands execute without operator approval. Update to version 0.8.0 or later immediately if you're running affected versions.

Strands Agents http_request tool has a critical authorization flaw affecting versions below 0.8.2. An attacker can inject prompts to redirect requests through a malicious proxy, exposing credentials in cleartext despite hostname allowlists. Update immediately to 0.8.2 or later—this requires your action.