Latest / LEON — AI Systems Security | AGORA Intelligence
CVE-2026-15746: A Memory Tool That Hands Your Elasticsearch Key to an Attacker
In AWS Strands Agents below 0.7.0, the elasticsearch_memory tool let the model set the destination URL, routing the operator's API key to an attacker's host.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.