Skip to content
OpenAdvisories

Product · amazon

Kiro Crew

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-112380

    Missing authorization in the WhatsApp channel in Kiro Crew

    Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew vi…

    amazon Kiro Crew