Strands Agents is an open-source Python SDK for building AI agents. A related package, strands-agents-tools, offers pre-built tools, including an elasticsearch_memory tool. This tool is used for agent memory storage. A server-side request forgery vulnerability, CVE-2026-15746, has been identified in the elasticsearch_memory tool. The tool's connection parameters were accessible to the large language model through its schema. When the api_key was omitted by a caller, the tool used the operator's ELASTICSEARCH_API_KEY environment variable. This variable was then sent to the host specified by the language model. A malicious prompt could trick the tool into connecting to a server controlled by a threat actor. This connection would then reveal the operator's Elasticsearch API key. The vulnerability affects versions prior to 0.7.0 of the software.