AWS discloses a Strands tool secret-masking bypass

What the public record establishes

AWS and the Strands maintainers published their advisories on October 28. They identify affected strands-agents-tools versions from 0.1.0 through versions below 0.8.6. The date records public disclosure; neither advisory establishes that the fix first became available that day. [1][2]

The model could set a masking parameter in the environment tool’s schema. Instructions in processed content could therefore cause cleartext environment-variable output without an operator consent prompt. The advisories identify 0.8.6 as patched and deprecate the tool; they do not report malicious exploitation. [1][2]