CVE-2026-115415: Secret masking bypass in the environment tool in Strands Agents Tools
Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents Tools before 0.8.6 might allow remote actors to obtain the agent host's environment variables in cleartext, including cloud credentials and API keys, via a crafted prompt that disables the tool's secret masking.
To remediate this issue, users should upgrade to version 0.8.6 or later and rotate any credentials that were present in the environment of agents that loaded the environment tool.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Strands Agents Toolsto a version that resolves this vulnerability.Fixed in 0.8.6 - Operational
Rotate any credentials that were present in the environment of agents that loaded the environment tool.
Event History
Frequently Asked Questions
Which deployments are exposed?
Agents using Strands Agents Tools before version 0.8.6 that loaded the environment tool are affected. The risk is highest where the agent host environment contains cloud credentials, API keys, or other secrets.
What does an attacker need to exploit this issue?
A remote actor needs to provide a crafted prompt that disables the environment tool's secret masking. The CVSS vector indicates no privileges are required, but user interaction is required.
What should be done after upgrading?
Upgrade to version 0.8.6 or later and rotate credentials that were present in the environment of agents that loaded the environment tool. This includes cloud credentials and API keys that may have been exposed in cleartext.