CVE-2026-95985

Name of the Vulnerable Software and Affected Versions Amazon Kiro IDE versions prior to 1.0.242

Description The file write tool allows remote unauthenticated actors to inject crafted instructions into the agent's context. This occurs when a user runs the agent within a crafted repository as an untrusted workspace, where sending any message can lead to agent modifications of auto-loaded global configuration paths.

Recommendations Update to version 1.0.242 or later. Review the global Kiro configuration directory ~/.kiro for unauthorized entries if the agent was previously run in an untrusted workspace.