Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2026-9255— Tool Execution Without Authorization via Piped Stdin in Kiro CLI

CVSS 7.8 · High EPSS 0.01% · P2

Affected Version Matrix 1

VendorProductVersion RangeStatus
AWSKiro CLI< 1.28.0affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-9255

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Tool Execution Without Authorization via Piped Stdin in Kiro CLI
Source: NVD (National Vulnerability Database)
Vulnerability Description
Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend you to upgrade to kiro-cli version 1.28.0 or later.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制缺失
Source: NVD (National Vulnerability Database)
Vulnerability Title
Amazon Web Services Kiro CLI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Amazon Web Services Kiro CLI是美国亚马逊（Amazon）公司的一个支持AI代理、MCP集成与终端自动化的命令行智能编程工具。 Amazon Web Services Kiro CLI 1.28.0之前版本存在安全漏洞，该漏洞源于工具授权提示缺少输入源验证，可能导致本地攻击者通过stdin管道传输特制内容至kiro-cli，在未经用户批准的情况下执行任意工具包括shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
AWSKiro CLI 0 ~ 1.28.0 -

II. Public POCs for CVE-2026-9255

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-9255

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-9255 (1)

Vendor Pages for CVE-2026-9255 (1)

IV. Related Vulnerabilities

Same vendor: AWS
Same weakness: CWE-862

V. Comments for CVE-2026-9255

No comments yet

Leave a comment