Strands Agents SDK A2A Serverで別セッションの会話内容が漏えいするおそれ
Summary
認証済みの遠隔ユーザーが、context_idを変えるだけで他の利用者の会話履歴を読み取り、後続の利用者のモデル動作を変える指示を残せるおそれがあります。影響を受けるのはPython版1.43.0より前、TypeScript版1.5.0より前のStrands Agents SDKです。修正版のstrands-agents 1.43.0または@strands-agents/sdk 1.5.0への更新をお勧めします。
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
認証済みの遠隔ユーザーが、context_idを変えるだけで他の利用者の会話履歴を読み取り、後続の利用者のモデル動作を変える指示を残せるおそれがあります。影響を受けるのはPython版1.43.0より前、TypeScript版1.5.0より前のStrands Agents SDKです。修正版のstrands-agents 1.43.0または@strands-agents/sdk 1.5.0への更新をお勧めします。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| AWS | strands-agents |
< 1.43.0 |
1.43.0 |
| AWS | strands-agents/sdk |
< 1.5.0 |
1.5.0 |
| pip | strands-agents |
< 1.43.0 |
1.43.0 |
| npm | @strands-agents/sdk |
< 1.5.0 |
1.5.0 |
| PyPI | strands-agents |
< 1.43.0 |
1.43.0 |
Original description The description as published by the source.
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id.
To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- AWS aws.amazon.com
- package github.com
- patch pypi.org
- patch npmjs.com
- web github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web aws.amazon.com
- web github.com
- web github.com
- web pypi.org
- web github.com