Live › vulnerability › CVE-2026-89332
Go to dashboardA specially crafted repository can make the Kiro agent write a workspace settings file that points the Powers registry URL at an external endpoint. When the Powers panel is opened, Kiro sends potentially sensitive workspace data to that endpoint, even if the user has not yet approved the edit.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 18:43 UTC, 0h before NVD. All times on this page are UTC.
Teams using Kiro IDE before 0.8.135 who open untrusted or third-party repositories, since the agent can be induced to write the malicious settings. The exposure depends on opening the Powers panel in such a workspace. Teams already on 0.8.135 or later, or who do not use Kiro IDE, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| amazon kiro ide | vendor | < 0.8.135 | 0.8.135 |
0.8.135.0.8.135 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Bulletin ID: 2026-111-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 12:00 PM PDT
Description:
Kiro IDE is an agentic development environment that makes it easy for developers to ship real engineering work with the help of AI agents.
We identified CVE-2026-89332, where the Kiro agent could modify a workspace's settings file in an untrusted workspace in Kiro IDE. A specially crafted repository could use this to point the Kiro Powers registry URL, which Kiro fetches when the Powers panel is opened, at an external endpoint, sending potentially sensitive workspace data to that endpoint. Kiro presented the edit to the user for approval, showing the inserted data and the URL, but the file was already written to disk, so opening the Powers panel before responding to the prompt made the request anyway.
Impacted versions: Kiro IDE < 0.8.135
Resolution:
This issue has been addressed in Kiro IDE version 0.8.135 and greater. We recommend upgrading to the latest version and rotate any credentials present in a project opened on an earlier version.
Workarounds:
None.
References:
Please email [email protected] with any security questions or concerns.
This page as .md · .json · in your agent: get_signal("CVE-2026-89332")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.