AWS Strands Agents Tools Received Four CVEs in 23 Days — And They All Share the Same Root Cause

Between July 15 and August 6, 2026, AWS Strands Agents Tools — the first-party tool package for the Strands Agents SDK — received four distinct security advisories. The vulnerabilities range from credential disclosure to arbitrary command execution, but they …