AWS Kiro IDE

4 known vulnerabilities in AWS Kiro IDE, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-89332 CVSS 6.7 medium Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might…
  • CVE-2026-11931 CVSS 6.8 medium Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to…
  • CVE-2026-10591 CVSS 8.6 high Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated…
  • CVE-2026-5429 CVSS 7.1 high Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated…