A security vulnerability, CVE-2026-115419, has been identified in Strands Agents, an open-source SDK for building AI agents. The issue lies within the Agent2Agent (A2A) server component, which fails to properly isolate conversation state between users. This flaw allows authenticated remote attackers to access other users' conversation history or alter model behavior in multi-tenant environments. Users of Strands Agents (Python) and @strands-agents/sdk (TypeScript) should update to versions 1.43.0 and 1.5.0 respectively, or later, to mitigate this risk.