Skip to content

Product

AWS Kiro CLI vulnerabilities

1 published CVE affecting AWS Kiro CLI, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest AWS Kiro CLI CVEs

Newest publication first

  1. CVE-2026-9255 Tool Execution Without Authorization via Piped Stdin in Kiro CLI

    Published
    HighCVSS 8.4 EPSS 0.13%

    Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend you to upgrade to k...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.