CVE-2026-124848

Incorrect default file permissions in Kiro CLI formerly Amazon Q Developer CLI before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created it...