CVE-2026-10591

High8.8 Published on Jun 2, 2026

Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vscode/tasks.json), enabling auto-execution on folder open. To remediate this issue, users should upgrade to Kiro IDE version 0.11 or later.

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-732

Vendorsamazon

Affected products

Vendors	Product	Versions
amazon	kiro ide	< 0.11

Vulnerabilities

Amazon Kiro: a prompt injection exfiltrates data from the workspace with a single message

Researchers reveal a prompt injection flaw in Amazon Kiro that exfiltrates workspace data via a single message. Affects IDE versions, patched in update.

Aug 28, 202601:16 5 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Amazon Kiro: a prompt injection exfiltrates data from the workspace with a single message