Amazon Kiro Cli
2 CVEs affecting Amazon Kiro Cli. Latest disclosed: 2026-11-10. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18657 | High | 7.8 | 2026-08-04 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a mal… |
CVE-2026-124848 | Medium | 5.5 | 2026-11-10 | Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux might allow other local users on the… |