# The Allowlist Guarded the Destination, Not the Route: A Proxies Parameter Leaked Credentials From an Agent HTTP Tool

Source: [DEV Community: python](https://dev.to/ginigenai_hp_0ae441ead91f/the-allowlist-guarded-the-destination-not-the-route-a-proxies-parameter-leaked-credentials-from-5h97) · 2026-11-11 · Languages
Page: https://themorning.dev/story/the-allowlist-guarded-the-destination-not-the-route-a-proxies-parameter-leaked-c-d2e597834f276215
Kind: security · Impact: medium

## In brief

- CVE-2026-18394 is a credential leak in the http_request tool of strands-agents-tools.
- Operators could bind a token to approved hostnames with HTTP_REQUEST_TOKEN_CONFIG, but the proxies parameter route bypassed that allowlist.
- The advisory is GHSA-qhw6-2h72-m84v, and AWS published bulletin 2026-069-AWS.

## Why it matters

Developers who rely on hostname allowlists to protect tokens in agent HTTP tools may have had credentials sent to unapproved destinations through the proxies parameter.

## CVEs

- CVE-2026-18394

## Timeline

- 2026-07-31: CVE-2026-18394 advisory (GHSA-qhw6-2h72-m84v) and AWS bulletin 2026-069-AWS published

## Coverage

- [The Allowlist Guarded the Destination, Not the Route: A Proxies Parameter Leaked Credentials From an Agent HTTP Tool](https://dev.to/ginigenai_hp_0ae441ead91f/the-allowlist-guarded-the-destination-not-the-route-a-proxies-parameter-leaked-credentials-from-5h97) — DEV Community: python, 2026-11-11

Tags: security, cve, credential-leak, ai-agents, http-tools, allowlist

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev