Known vulnerabilities in Amazon Kiro IDE
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-95985 | The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject… | 8.8 High | Sep 24, 2026 |
| CVE-2026-18656 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated… | 7.8 High | Aug 4, 2026 |