Evidence · DiggingBeagle record
Strands Agents Tools environment masking bypass advisory
Maintainer advisory describing model-controlled masking false leading to host environment variable exposure.
- Source role
- primary disclosure
Evidence record
Maintainer advisory describing model-controlled masking false leading to host environment variable exposure.
Claim-level citations (2)
- supportsStrands environment tool let model instructions disable secret masking: The Strands Agents Tools advisory identifies the environment tool’s model-selectable masking argument as a route for exposing process environment variables and lists a patched tool release.
GHSA-qjx4-hg6g-2f34: masking false, environment tool effect, affected versions
- supportsStrands environment tool let model instructions disable secret masking: The Strands Agents Tools environment tool exposed a masking parameter to an agent, allowing the model to choose false and request unredacted host environment variables. An application must make the affected environment tool available and allow an agent or injected prompt to influence its masking option. Cloud credentials or provider keys in the tool host environment could be returned to the model even though the operator expected sensitive values to be hidden.
GHSA-qjx4-hg6g-2f34: masking false, environment tool effect, affected versions