CVE-2026-89332— Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Quick assessment
Affected
AWS Kiro IDE
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Amazon Kiro IDE 的“Kiro Powers”功能中，版本 0.8.135 之前存在一个漏洞，该漏洞会将来自不受信任控制域的功能纳入其中，可能允许远程未认证的攻击者获取开发者工作站上的敏感信息。经过精心构造的仓库内容可以导致 Agent 修改工作区配置文件，从而将 Kiro Powers 的注册表请求重定向到由攻击者控制的端点；当用户打开“Powers”面板时，工作区数据会被发送至该端点。 要解决此问题，用户应升级至 Kiro IDE 版本 0.8.135 或更高版本。此前曾在较早版本中打开过项目
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89332
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Source: CVE Program / CVE List V5
Vulnerability Description
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the workspace settings file, which redirects the Kiro Powers registry request to an actor controlled endpoint and sends workspace data to that endpoint when the Powers panel is opened.
To remediate this issue, users should upgrade to Kiro IDE version 0.8.135 or later. Users who opened a project in an earlier version should also rotate any credentials that were present in that project.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
从非可信控制范围包含功能例程
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-89332
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89332
请登录查看更多情报信息。
Other References for CVE-2026-89332 (2)
-
https://aws.amazon.com/security/security-bulletins/2026-111-aws/ vendor-advisory
Same Patch Batch · AWS · 2026-09-11 · 5 CVEs total
| CVE-2026-89066 | 7.8 HIGH | OS command injection in the task synthesis component in projen |
| CVE-2026-89065 | 7.1 HIGH | Relative path traversal in the generated file manifest cleanup component in projen |
| CVE-2026-18061 | 5.9 MEDIUM | Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper Remote |
| CVE-2026-89090 | 5.9 MEDIUM | Denial of service in the event stream header decoder in AWS SDK for Go v2 |
IV. Related Vulnerabilities
Same product: Kiro IDE
-
CVE-2026-18656
Executable Resolution from Untrusted Project Directory in Ki -
CVE-2026-11931
Insecure Permissions on Authentication Token Cache File in K -
CVE-2026-10591
Kiro IDE Insufficient File Write Restrictions to Execution-S -
CVE-2026-5429
Kiro IDE Webview Cross-Site Scripting via Workspace Color Th -
CVE-2026-4295
Arbitrary code execution via crafted project files in Kiro I
Same vendor: AWS
-
CVE-2026-89090
Denial of service in the event stream header decoder in AWS -
CVE-2026-18061
Improper Restriction of XML External Entity References in AW -
CVE-2026-89066
OS command injection in the task synthesis component in proj -
CVE-2026-89065
Relative path traversal in the generated file manifest clean -
CVE-2026-89049
Server-side request forgery in the Session Manager port forw
Same weakness: CWE-829
V. Comments for CVE-2026-89332
No comments yet