CVE-2026-112380

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. To...

EUVD-2026-105278

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. To...

CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. To...

CVE-2026-112380

The Kiro Crew software is vulnerable to missing authorization in the WhatsApp group channel. This flaw allows a remote actor who is a member of an operator-configured WhatsApp group to send messages that take control of the operator's other agent sessions. Consequently, the attacker may be able t...

PT-2026-118635

Name of the Vulnerable Software and Affected Versions Kiro Crew versions prior to 0.7.2 Description Missing authorization in the WhatsApp group channel allows a remote actor who is a member of an operator-configured WhatsApp group to control other agent sessions of the operator. This occurs becau...

CVE-2026-95985

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to...

EUVD-2026-86308

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to...

CVE-2026-95985 Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to...

CVE-2026-95985 Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to...

CVE-2026-95985

Versions of Amazon Kiro IDE prior to 1.0.242 are vulnerable to an issue where the file write tool allows remote unauthenticated actors to inject crafted instructions into the agent's context. By running the agent in a crafted repository designated as an untrusted workspace , an attacker can cause...

CVE-2026-95985: Inclusion of Functionality from Untrusted Control Sphere

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to...

PT-2026-98205

Name of the Vulnerable Software and Affected Versions Amazon Kiro IDE versions prior to 1.0.242 Description The file write tool allows remote unauthenticated actors to inject crafted instructions into the agent's context. This occurs when a user runs the agent within a crafted repository as an...

NPM: 9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

NPM: 9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding vulnerability discovered by ? in WordPress Npm 9router versions = 0.5.2...

9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

The Kiro API-key validation endpoint builds an upstream URL using a user-controlled region value. By supplying a crafted region such as kiro-canary.local:8443, an authenticated attacker can cause 9router to send the Kiro validation request to an attacker-controlled host under the constructed...

adlc

ADLC Bug-Fix PoC A proof of concept for an agentic developm...

CVE-2026-89332

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

CVE-2026-89332 Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

CVE-2026-89332

Amazon Kiro IDE (before version 0.8.135 ) is vulnerable to sensitive workspace data exfiltration through its Kiro Powers feature. Crafted repository content can cause the AI agent to modify the workspace settings file, redirecting the Kiro Powers registry request to an actor-controlled endpoint. ...

EUVD-2026-76443

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

CVE-2026-89332 Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...