Known Vulnerabilities for Kiro Ide by Amazon
Listed below are 4 of the newest known vulnerabilities associated with "Kiro Ide" by "Amazon".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124848 json | Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux mig... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-112380 json | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-co... | Not Provided | 2026-10-20 | 2026-10-29 |
| CVE-2026-95985 json | The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted in... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-89332 json | Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-18656 json | Not Provided | 2026-08-04 | 2026-10-24 | |
| CVE-2026-10591 json | Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote una... | Not Provided | 2026-06-02 | 2026-10-20 |
| CVE-2026-0830 json | Not Provided | 2026-01-09 | 2026-04-28 |