CVE-2026-95985

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to auto-loaded global configuration paths. We recommend you upgrade to Kiro IDE version 1.0.242 or later. Users who ran the agent in an untrusted workspace on an earlier version should also review the global Kiro configuration directory (~/.kiro) for entries they did not create.

• CWE-349
• CWE-829

• https://aws.amazon.com/security/security-bulletins/2026-117-aws/
• https://kiro.dev/changelog/ide/1-0-242/

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-95930A security vulnerability has been detected in iFlytek astron…6.3
• CVE-2026-9594The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator…4.4
• CVE-2026-9595Impact: When a user-configured proxy on webpack-dev-server h…4.3
• CVE-2026-95957A vulnerability was found in SourceCodester Smart Attendance…4.3
• CVE-2026-95958A security flaw has been discovered in JusticeRage Manalyze …3.3
• CVE-2026-9597Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail …5.4
• CVE-2026-9599The Tectite Forms plugin for WordPress is vulnerable to Cros…4.3
• CVE-2026-9602Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to…6.5
• CVE-2026-9603A security vulnerability has been detected in SourceCodester…6.5
• CVE-2026-9604A vulnerability was detected in JeecgBoot up to 3.9.1. This …4.3
• CVE-2026-9605A flaw has been found in GNU libredwg up to 0.13.4.8160. Thi…7.3
• CVE-2026-9606A vulnerability has been found in itsourcecode Courier Manag…7.3