Amazon Kiro IDE vulnerabilities

5 CVEs affecting Amazon Kiro IDE, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-95985, published 2026-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-0830, published 2026-01-09. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously…
CVE-2026-10591, published 2026-06-02. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions…
CVE-2026-18656, published 2026-08-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory…
CVE-2026-89332, published 2026-09-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive…
CVE-2026-95985, published 2026-09-24. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a…