Advisories · Technology

AWS Kiro IDE.

Every CVE that names AWS Kiro IDE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-89332 CVE record

CVSS 6.7 Medium

Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
- AWS Kiro IDE
- Information disclosure
- CWE-829
Not analysed yet 11 Sept 2026
CVE-2026-11931 CVE record

CVSS 6.8 Medium

Insecure Permissions on Authentication Token Cache File in Kiro IDE
- AWS Kiro IDE
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-10591 CVE record

CVSS 8.6 High

Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
- AWS Kiro IDE
- Broken access control
Not analysed yet 2 Jun 2026
CVE-2026-5429 CVE record

CVSS 7.1 High

Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme
- AWS Kiro IDE
- Cross-site scripting (XSS)
Not analysed yet 2 Apr 2026
CVE-2026-4295 CVE record

CVSS 8.5 High

Arbitrary code execution via crafted project files in Kiro IDE
- AWS Kiro IDE
- CWE-829
Not analysed yet 17 Mar 2026
CVE-2026-0830 CVE record

CVSS 8.4 High

Command Injection in Kiro GitLab Merge Request Helper
- AWS Kiro IDE
- Command injection
Not analysed yet 9 Jan 2026