Kiro Ide (Amazon) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 72 known versions, newest CVE from 2026-09-24. Vendor: Amazon.

CVEs of Kiro Ide

• CVE-2026-95985 - CVSS 8.8 (high), 2026-09-24: The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's…
• CVE-2026-89332 - CVSS 6.7 (medium), 2026-09-11: Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote…
• CVE-2026-18656 - CVSS 8.5 (high), 2026-08-04: An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a…
• CVE-2026-10591 - CVSS 8.8 (high), 2026-06-02: Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute…
• CVE-2026-0830 - CVSS 8.4 (high), 2026-01-09: Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before…