Description
Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin.
We recommend you to upgrade to kiro-cli version 1.28.0 or later.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AWS | Kiro CLI | < 1.28.0 | 1.28.0 |
References
- https://kiro.dev/changelog/cli/1-28/ release-notes
- https://aws.amazon.com/security/security-bulletins/2026-035-aws/ vendor-advisory