SecurityFan score 42 · Tier B
The Allowlist Guarded the Destination, Not the Route: A Proxies Parameter Leaked Credentials From an Agent HTTP Tool
DEV · By hugginf_expert ·
The Brief
- CVE-2026-18394 is a credential leak in the http_request tool of strands-agents-tools.
- Operators could bind a token to approved hostnames with HTTP_REQUEST_TOKEN_CONFIG, but the proxies parameter route bypassed that allowlist.
- The advisory is GHSA-qhw6-2h72-m84v, and AWS published bulletin 2026-069-AWS.
Why it matters
Developers who rely on hostname allowlists to protect tokens in agent HTTP tools may have had credentials sent to unapproved destinations through the proxies parameter.
Who’s affected
- Teams using strands-agents-tools with the http_request tool
- Teams that bind tokens with HTTP_REQUEST_TOKEN_CONFIG
- CVE-2026-18394
- #security
- #cve
- #credential-leak
- #ai-agents
- #http-tools
- #allowlist
TL;DR CVE-2026-18394 (GitHub advisory GHSA-qhw6-2h72-m84v, AWS bulletin 2026-069-AWS, published July 31, 2026) is a credential leak in the http_request tool of strands-agents-tools . An operator could bind a token to approved hostnames with HTTP_REQUEST_TOKEN_CONFIG , but the…
Timeline
CVE-2026-18394 advisory (GHSA-qhw6-2h72-m84v) and AWS bulletin 2026-069-AWS published
DEV Community: python
The Allowlist Guarded the Destination, Not the Route: A Proxies Parameter Leaked Credentials From an Agent HTTP Tool