Amazon Kiro IDE Vulnerability Allows Data Exfiltration
Amazon Kiro, an AI-powered agentic IDE, was found vulnerable to prompt injection attacks that could exfiltrate sensitive data through Kiro Powers. The…
Tag: Amazon Kiro
Amazon Kiro Prompt Injection Vulnerability Enables Data Exfiltration via Kiro Powers
Cybersecurity researchers at Mindguard have disclosed a prompt injection vulnerability in Amazon Kiro, an AI-powered agentic integrated development environment (IDE), that could…
CVE-2026-10591: Amazon Kiro Insufficient Access Control
Amazon addressed an insufficient access control flaw in Kiro IDE (CVSS 8.8) that could allow a remote unauthenticated attacker to execute arbitrary…