| CVE-2026-89332 |
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version…
|
5.5
Medium
|
Sep 11, 2026 |
| CVE-2026-11931 |
Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication…
|
6.8
Medium
|
Jun 15, 2026 |
| CVE-2026-10591 |
Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow…
|
8.8
High
|
Jun 2, 2026 |
| CVE-2026-5429 |
Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a…
|
7.8
High
|
Apr 2, 2026 |
| CVE-2026-4295 |
Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remote…
|
7.8
High
|
Mar 17, 2026 |
| CVE-2026-0830 |
Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab…
|
8.4
High
|
Jan 9, 2026 |