Amazon Kiro Ide
2 CVEs affecting Amazon Kiro Ide. Latest disclosed: 2026-09-24. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-95985 | High | 8.8 | 2026-09-24 | The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's contex… |
CVE-2026-18656 | High | 7.8 | 2026-08-04 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a ma… |