How many amazon kiro ide CVEs are in CISA KEV?

None of amazon kiro ide's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of amazon kiro ide are affected?

11 distinct amazon kiro ide versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in amazon kiro ide CVEs?

amazon kiro ide's CVEs most often map to these CWE weakness types: CWE-829 (Inclusion of Functionality from Untrusted Control Sphere), CWE-427 (Uncontrolled Search Path Element), CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

What is the average severity of amazon kiro ide CVEs?

The average CVSS base score across amazon kiro ide's scored CVEs is 8.2.

RadicalNotion.AI

Log in Create an account

amazon

5 CVEs

amazon kiro ide Vulnerabilities

Name: amazon kiro ide vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for kiro ide by amazon.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.2

Avg CVSS

2026–2026

Last updated September 24, 2026

Overview

amazon kiro ide has 5 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.2. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of amazon kiro ide's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of amazon kiro ide's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No amazon kiro ide CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every amazon kiro ide version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.111 CVE
< 0.6.181 CVE
< 0.8.1351 CVE
< 1.0.2281 CVE
< 1.0.2421 CVE
1.0.0 <= v <= 1.0.2121 CVE

Fixed in

0.111 CVE
0.6.181 CVE
0.8.1351 CVE
1.0.2281 CVE
1.0.2421 CVE

Find a version

5 CVEs

Sort

Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
CVE-2026-95985
Patch
CWE-829
High · CVSS 8.6
EPSS 0.1% (3th pct)2026-09-24
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
CVE-2026-89332
Patch
CWE-829
Medium · CVSS 6.7
EPSS 0.2% (7th pct)2026-09-11
Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
CVE-2026-18656
Patch
CWE-427
High · CVSS 8.5
EPSS 0.2% (12th pct)2026-08-04
Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
CVE-2026-10591
Patch
CWE-732
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-06-02
Command Injection in Kiro GitLab Merge Request Helper
CVE-2026-0830
Patch
CWE-78
High · CVSS 8.4
EPSS 1.4% (73th pct)2026-01-09

Common weakness types

The CWE weakness categories most often found in amazon kiro ide CVEs. Follow any weakness for its full explanation.

Other amazon products

Browse vulnerabilities for other products by amazon.

freertos22 CVEs amazon web services freertos14 CVEs fire os13 CVEs opensearch11 CVEs freertos-plus-tcp10 CVEs tough10 CVEs blink xt2 sync module7 CVEs blink xt2 sync module firmware7 CVEs

All amazon vulnerabilities

Frequently asked questions

Common questions about amazon kiro ide vulnerabilities.

How many CVEs does amazon kiro ide have?: amazon kiro ide has 5 published CVE records since 2026.
How many amazon kiro ide CVEs are in CISA KEV?: None of amazon kiro ide's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for amazon kiro ide vulnerabilities?: No amazon kiro ide CVEs currently have a tracked public exploit in this dataset.
Which versions of amazon kiro ide are affected?: 11 distinct amazon kiro ide versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in amazon kiro ide CVEs?: amazon kiro ide's CVEs most often map to these CWE weakness types: CWE-829 (Inclusion of Functionality from Untrusted Control Sphere), CWE-427 (Uncontrolled Search Path Element), CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
What is the average severity of amazon kiro ide CVEs?: The average CVSS base score across amazon kiro ide's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track amazon kiro ide vulnerabilities

Get an alert for each new amazon kiro ide CVE, with AI-written analysis and remediation steps.

Create an account See pricing