CVE-2026-10591

HIGH8.8Published on June 2, 2026

Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vscode/tasks.json), enabling auto-execution on folder open. To remediate this issue, users should upgrade to Kiro IDE version 0.11 or later.

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-732

Vendorsamazon

Affected products

Vendors	Prodotto	Versioni
amazon	kiro ide	< 0.11

Amazon Kiro: una prompt injection esfiltra dati dal workspace con un solo messaggio

Vulnerabilities

Amazon Kiro: a prompt injection exfiltrates data from the workspace with a single message

Researchers reveal a prompt injection flaw in Amazon Kiro that exfiltrates workspace data via a single message. Affects IDE versions, patched in update.

Aug 28, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Amazon Kiro: a prompt injection exfiltrates data from the workspace with a single message