What’s Vulnerable › Products

Amazon Kiro CLI vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Amazon Kiro CLI version is affected

Latest Amazon Kiro CLI vulnerabilities

• CVE-2026-18657 — Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows (CVSS 7.8)
• CVE-2026-9255 — Tool Execution Without Authorization via Piped Stdin in Kiro CLI (CVSS 7.8)