Skip to content
OpenAdvisories

Product · amazon

Kiro IDE

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-95985

    Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

    The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message…

    amazon Kiro IDE
  • High 7.8
    CVE-2026-18656

    Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows

    An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protectio…

    amazon Kiro IDE