Amazon addressed an insufficient access control flaw in Kiro IDE (CVSS 8.8) that could allow a remote unauthenticated attacker to execute arbitrary commands via crafted instructions, leading to writes to execution-sensitive paths like .vscode/tasks.json or ~/.kiro/settings/mcp.json, facilitating auto-execution on folder open.