# Strands environment tool: update and rotate credentials Canonical: https://www.oktsec.com/radar/strands-environment-cve-2026-115415 Publisher: Oktsec Language: en Published: 2026-10-28T23:52:08Z Updated: 2026-10-28T23:52:08Z Record reviewed: 2026-10-28T23:52:08Z Latest evidence check: 2026-10-28T23:52:08Z Disclosed: 2026-10-28 A prompt in content processed by an agent can cause the environment tool to return credentials without masking. Update strands-agents-tools and rotate credentials from agent environments that loaded the tool. ## Evidence and response priority - Category: Vulnerability - Oktsec priority: Review this week - Rationale: The affected tool must be loaded and the agent must process attacker-controlled instructions. AWS recommends an update and credential rotation; the reviewed vendor sources do not establish attacks in the wild. - Evidence: Attacks not established - Verification: Vendor confirmed - Fix status: Additional action required - Exposure requirement: Application or configuration dependent - Vendor: Strands Agents - Products: strands-agents-tools - CVEs: CVE-2026-115415 - Vendor severity: CVSS 3.1 6.5 ## Technical overview The environment tool exposed its masking control to the model. Instructions placed in content processed by an agent could cause secrets in its host environment to be returned without masking or operator approval. Version 0.8.6 moves masking control to the operator and deprecates the tool. AWS also recommends rotating credentials present in environments of agents that loaded it. The additional-action status reflects this credential task; a software fix is available. This is a separate package and failure from the Strands SDK A2A session-isolation advisory. Updating one does not establish that the other has been remediated. The reviewed vendor advisories do not establish exploitation in the wild or exposure of a particular deployment. ## Recommended response Update to 0.8.6 or later and rotate credentials present in environments of agents that loaded the environment tool. If upgrading is not possible immediately, remove the tool. Relevant to: Teams whose agents load the environment tool from strands-agents-tools 0.1.0 through versions before 0.8.6. ## CVE attribution - CVE-2026-115415: Strands Agents — strands-agents-tools; CVSS 3.1: 6.5. [Source](https://github.com/strands-agents/tools/security/advisories/GHSA-qjx4-hg6g-2f34) ## Affected systems and fixes ### strands-agents-tools with environment loaded Affected: 0.1.0 and later, before 0.8.6 Fixed release / action: 0.8.6 Confirm the running version against the vendor advisory, including any distribution backports. ## CISA KEV evidence Catalog: 2026.10.28 Checked: 2026-10-28T23:52:19.770Z No matching CVE appears in the reviewed catalog snapshot. CISA KEV inclusion establishes known exploitation of the listed CVE, not compromise of your environment. Absence does not rule out exploitation. The date added is not the first attack date. Federal deadlines and forensic triage requirements are context, not universal obligations for private organizations or businesses in Latin America. ## Supporting evidence Snapshot checked: 2026-10-27T15:30:57.206Z. These dates do not change the incident’s editorial review date. ### FIRST EPSS forecast No score returned for: CVE-2026-115415 EPSS is a prediction, not exploitation evidence or organization-specific risk. Confirmed exploitation takes precedence. A missing score is not zero. Check status: available; last successful check: 2026-10-27T15:30:57.206Z. ## Response checklist 1. **Find agents that loaded environment** — Check package versions, tool configuration and deployed forks. Installing the package alone does not establish that the affected tool was loaded. 2. **Update or remove the tool** — Install 0.8.6 or later and patch derivative code. If an immediate update is not possible, remove environment from the agent. The tool is deprecated in 0.8.6. 3. **Rotate credentials from the affected environments** — Follow AWS guidance for credentials that were present in environments of agents that loaded the tool. Coordinate replacement and revocation across cloud keys, API tokens and other secrets; updating the package alone is not credential rotation. 4. **Verify deployment and reduce secret access** — Confirm the deployed package and tool configuration. Avoid persistent credentials in the process environment and restrict outbound destinations as recommended by AWS. Review suspected exposure separately. ## Relevance to AI environments The model could disable a control intended to protect secrets. Review which tools can read credentials and which can send data outside the host. ## Sources - [AWS bulletin 2026-154: environment masking and credential rotation](https://aws.amazon.com/security/security-bulletins/2026-154-aws/) — AWS; Vendor notice; checked 2026-10-28T23:38:45Z - [Strands Tools GHSA-qjx4-hg6g-2f34](https://github.com/strands-agents/tools/security/advisories/GHSA-qjx4-hg6g-2f34) — Strands Agents; Vendor notice; checked 2026-10-28T23:38:45Z ## Editorial record - 2026-10-28T23:52:08Z: Added advisory coverage with product-specific response steps and dated exploitation evidence. ## Related incidents - [Strands A2A: keep each user’s conversations separate](https://www.oktsec.com/radar/strands-agents-a2a-cve-2026-115419) ## Use this advisory in Radar Use the Advisory view to understand the issue and its evidence, Affected systems to compare versions, and Response plan to record applicability, an owner and action progress. Plans are saved only in the current browser and can be downloaded for sharing; they are not a shared team account or an automated scan. Completing a plan does not validate remediation. Talk to Oktsec opens a technical consultation with the advisory and selected service preserved. Scope, fees and access are agreed before any assessment. [Open advisory](https://www.oktsec.com/radar/strands-environment-cve-2026-115415) · [Build a response plan](https://www.oktsec.com/radar/strands-environment-cve-2026-115415#review-workspace) - [AI agent review consultation](https://www.oktsec.com/contact?source=radar&intent=assessment&item=strands-environment-cve-2026-115415&service=agent_review) - [Patch verification consultation](https://www.oktsec.com/contact?source=radar&intent=assessment&item=strands-environment-cve-2026-115415&service=patch_verification) ## Scope and corrections Radar is a selected editorial collection, not a complete vulnerability database or a scan of your environment. Priorities are Oktsec analysis. Source confirmation and checklist completion do not establish whether your systems are compromised or secure. [Sources and methodology](https://www.oktsec.com/radar/about). Report corrections with supporting sources to info@oktsec.com. Do not send secrets or private incident data.