Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
Résumé IA
Rédigé par une IA externe ; il peut contenir des erreurs. Vérifiez la description d'origine et les références ci-dessous avant d'agir.
認証済みの遠隔ユーザーが、context_idを変えるだけで他の利用者の会話履歴を読み取り、後続の利用者のモデル動作を変える指示を残せるおそれがあります。影響を受けるのはPython版1.43.0より前、TypeScript版1.5.0より前のStrands Agents SDKです。修正版のstrands-agents 1.43.0または@strands-agents/sdk 1.5.0への更新をお勧めします。
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| AWS | strands-agents |
< 1.43.0 |
1.43.0 |
| AWS | strands-agents/sdk |
< 1.5.0 |
1.5.0 |
| pip | strands-agents |
< 1.43.0 |
1.43.0 |
| npm | @strands-agents/sdk |
< 1.5.0 |
1.5.0 |
| PyPI | strands-agents |
< 1.43.0 |
1.43.0 |
Description d'origine La description telle que publiée par la source (souvent en anglais).
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter model behavior for subsequent callers via HTTP requests to the A2A endpoint using a different context_id.
To mitigate this issue, users should upgrade to strands-agents 1.43.0 (Python) or @strands-agents/sdk 1.5.0 (TypeScript).
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
Références
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- AWS aws.amazon.com
- package github.com
- patch pypi.org
- patch npmjs.com
- web github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web aws.amazon.com
- web github.com
- web github.com
- web pypi.org
- web github.com