Description
The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to auto-loaded global configuration paths.



We recommend you upgrade to Kiro IDE version 1.0.242 or later. Users who ran the agent in an untrusted workspace on an earlier version should also review the global Kiro configuration directory (~/.kiro) for entries they did not create.
Published: 2026-09-24
Score: 8.6 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 24 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Description The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to auto-loaded global configuration paths. We recommend you upgrade to Kiro IDE version 1.0.242 or later. Users who ran the agent in an untrusted workspace on an earlier version should also review the global Kiro configuration directory (~/.kiro) for entries they did not create.
Title Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
First Time appeared Amazon
Amazon kiro Ide
Weaknesses CWE-349
CWE-829
CPEs cpe:2.3:a:amazon:kiro_ide:*:*:linux:*:*:*:*:*
cpe:2.3:a:amazon:kiro_ide:*:*:macos:*:*:*:*:*
cpe:2.3:a:amazon:kiro_ide:*:*:windows:*:*:*:*:*
Vendors & Products Amazon
Amazon kiro Ide
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Amazon Kiro Ide
cve-icon MITRE

Status: PUBLISHED

Assigner: AMZN

Published:

Updated: 2026-09-24T17:24:09.224Z

Reserved: 2026-09-22T17:39:51.695Z

Link: CVE-2026-95985

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T18:19:08.357

Modified: 2026-09-24T18:19:08.357

Link: CVE-2026-95985

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-349

    Acceptance of Extraneous Untrusted Data With Trusted Data

  • CWE-829

    Inclusion of Functionality from Untrusted Control Sphere