What’s Vulnerable › Products

AWS Kiro IDE vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your AWS Kiro IDE version is affected

Latest AWS Kiro IDE vulnerabilities

• CVE-2026-95985 — Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces (CVSS 8.8)
• CVE-2026-89332 — Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration (CVSS 5.5)
• CVE-2026-18656 — Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows (CVSS 7.8)
• CVE-2026-11931 — Insecure Permissions on Authentication Token Cache File in Kiro IDE (CVSS 5.5)
• CVE-2026-10591 — Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths (CVSS 8.8)
• CVE-2026-5429 — Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme (CVSS 7.8)
• CVE-2026-4295 — Arbitrary code execution via crafted project files in Kiro IDE (CVSS 7.8)
• CVE-2026-0830 — Command Injection in Kiro GitLab Merge Request Helper (CVSS 7.8)