Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-9255— Tool Execution Without Authorization via Piped Stdin in Kiro CLI

Quick assessment

Affected
AWS Kiro CLI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Amazon Web Services Kiro CLI是美国亚马逊（Amazon）公司的一个支持AI代理、MCP集成与终端自动化的命令行智能编程工具。 Amazon Web Services Kiro CLI 1.28.0之前版本存在安全漏洞，该漏洞源于工具授权提示缺少输入源验证，可能导致本地攻击者通过stdin管道传输特制内容至kiro-cli，在未经用户批准的情况下执行任意工具包括shell命令。

CVSS 7.8 · High EPSS 0.12% · P2

Affected Version Matrix 1

VendorProduct Version RangeStatus
AWS Kiro CLI < 1.28.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-9255

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Tool Execution Without Authorization via Piped Stdin in Kiro CLI
Source: CVE Program / CVE List V5
Vulnerability Description
Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend you to upgrade to kiro-cli version 1.28.0 or later.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Amazon Web Services Kiro CLI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Amazon Web Services Kiro CLI是美国亚马逊（Amazon）公司的一个支持AI代理、MCP集成与终端自动化的命令行智能编程工具。 Amazon Web Services Kiro CLI 1.28.0之前版本存在安全漏洞，该漏洞源于工具授权提示缺少输入源验证，可能导致本地攻击者通过stdin管道传输特制内容至kiro-cli，在未经用户批准的情况下执行任意工具包括shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
AWS Kiro CLI 0 ~ 1.28.0 -

II. Public POCs for CVE-2026-9255

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-9255

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-9255 (1)

Vendor Pages for CVE-2026-9255 (1)

IV. Related Vulnerabilities

Same product: Kiro CLI
Same vendor: AWS
Same weakness: CWE-862

V. Comments for CVE-2026-9255

No comments yet

Leave a comment