Amazon Kiro CLI vulnerabilities

Latest Amazon Kiro CLI CVEs

Newest publication first

1. CVE-2026-124848 Incorrect default permissions on session transcripts and prompt history in Kiro CLI

   Published 2026-11-10

   Medium·CVSS 6.8

   Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain....

2. CVE-2026-18657 Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows

   Published 2026-08-04

   High·CVSS 8.5

   An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user s...

3. CVE-2026-9255 Tool Execution Without Authorization via Piped Stdin in Kiro CLI

   Published 2026-05-22

   High·CVSS 8.4

   Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend you to upgrade to k...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.