Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vscode/tasks.json), enabling auto-execution on folder open. To remediate this issue, users should upgrade to Kiro IDE version 0.11 or later.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-04 | 1 | General1 |
| 2026-07-30 | 1 | Disclosure1 |
| 2026-08-02 | 1 | Disclosure1 |
| 2026-08-03 | 2 | Disclosure1General1 |
| 2026-08-24 | 1 | Patch1 |
AWS Kiro (agentic IDE) has CVE-2026-10591: prompt injection bypasses safety boundary, silently rewrites MCP config, executes code on dev machine. No approval. Supply-chain risk. Update to v0.11.130+. Read: https://buff.ly/m5hAFUa https://t.co/iGMnCG1vXk
Post summary
The tweet announces CVE‑2026‑10591, outlining how prompt injection bypasses safety boundaries and explains an update that addresses the issue.
Legacy exposure keeps paying off for attackers. AWS Kiro flaw shows why AI coding agents need platform-le… CVE-2026-10591 and new Kiro research show how AI coding agents can turn hidden instructions… 🔗 Read → https://invaders.ie/resources/blog/vulnerability/aws-kiro-agentic-ide-rce-platform-guardrails
Post summary
The tweet announces a newly discovered CVE-2026-10591 affecting AWS Kiro, notes its potential for remote code execution, and links to a blog post for more details.
🛑 AWS Kiro flaw shows why AI coding agents need platform-level guardrails CVE-2026-10591 and new Kiro research show how AI coding agents can turn hidden instructions… 🔗 Details → https://invaders.ie/resources/blog/vulnerability/aws-kiro-agentic-ide-rce-platform-guardrails
Post summary
The post references CVE-2026-10591 in the context of AWS Kiro research but provides no concrete PoC, exploit, or patch information, making it a general mention with low confidence.
Invisible text on a clean docs page made AWS Kiro rewrite its own config. CVE-2026-10591. CVSS 8.8. One pixel the human can't see, the model reads as instructions. The boundary isn't a wall. It's a font size.
Post summary
The post discloses a new CVE (CVE-2026-10591) with a severity score of 8.8, describing an exploitation vector where a single invisible pixel can trigger AWS Kiro to rewrite its own configuration.
CVE-2026-10591: Amazon Kiro IDE File Write Restriction Flaw - What It Means for Your Business and How to Respond https://hubs.li/Q04v4KG50
Post summary
The article discusses Amazon Kiro IDE's file write restriction flaw, outlining business implications and recommended remediation steps, likely including vendor patches.
CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths http://dlvr.it/TSsZjh #patchmanagement
Post summary
The post offers a terse CVE reference with a vague link, but lacks details about PoC, exploits, or patches, providing only a minimal technical description of the vulnerability.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | amazon | kiro_ide | - | - | - |