Skip to content
OpenAdvisories

Product · AWS

Kiro IDE

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-89332

    Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

    Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content…

    AWS Kiro IDE
  • Medium 5.5
    CVE-2026-11931

    Insecure Permissions on Authentication Token Cache File in Kiro IDE

    Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or processes via world-readable permissions (0644) instead of owner-restricted permissions (0600). To re…

    AWS Kiro IDE