Login Request a demo
KI
Product
Kiro IDE
by Amazon · last CVE Sep 24, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kiro IDE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-95985
8.8
0%
Sep 24
Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
Affected: before 1.0.242
CVE-2026-10591
8.8
1%
Jun 2
Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
Affected: before 0.11
CVE-2026-18656
7.8
0%
Aug 4
Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
Affected: 1.0.0 through 1.0.212
CVE-2026-0830
7.8
1%
Jan 9
Command Injection in Kiro GitLab Merge Request Helper
Affected: before 0.6.18
CVE-2026-89332
5.5
0%
Sep 11
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Affected: before 0.8.135
Showing 5