⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Companies

Amazon Addresses Kiro IDE Vulnerability

June 25, 2026

Amazon fixed a prompt injection vulnerability in Kiro IDE that could lead to data exfiltration. The fix was implemented in version 0.8.140.

Discovered from: Amazon Kiro Prompt Injection Vulnerability Enables Data Exfiltration via Kiro Powers