CVE-2026-10591

creationtimestamp| type| source ---|---|--- 2026-06-02 17:49:49+00:00| seen| https://bsky.app/profile/alexpulver.bsky.social/post/3mnd5rysb5f2t 2026-06-02 20:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndf4cjhad2d 2026-06-04 04:52:39+00:00| seen|...

CVE-2026-10591

CVE-2026-10591 affects Amazon Kiro IDE prior to 0.11. The issue is insufficient access control in the file write tool, allowing remote unauthenticated actors to cause writes to execution-sensitive paths (e.g., .vscode/tasks.json), enabling automatic execution on folder open. Impact is high: poten...