CVE-2026-19111 Details

A vulnerability allowing insecure direct object reference (IDOR) has been identified in the memory management tools of Amazon Strands Agents Tools, specifically in versions prior to 0.8.3. This issue allows remote authenticated users to access, modify, or delete memories belonging to other tenants. The vulnerability arises because the tools' namespace parameter, which is supposed to isolate tenant data, can be manipulated by the large language model (LLM) to forge tool calls that access another tenant's memories. Additionally, the standalone mongodb_memory and elasticsearch_memory functions exposed connection parameters that could redirect memory operations to an actor-specified cluster.

Users should upgrade to Amazon Strands Agents Tools version 0.8.3 or later. In the fixed version, the namespace and connection parameters are securely bound when the memory provider is created, preventing LLMs from selecting a tenant. Until an upgrade can be performed, avoid using the mongodb_memory, elasticsearch_memory, or mem0_memory tools in multi-tenant environments where users share a single agent deployment. Instead, restrict these tools to single-tenant deployments or use the standalone functions with caution.