CVE-2026-89332
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
CVSS score
5.5
EPSS probability
%0.2
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.1
CVE-2024-6387
Openssh: regresshion - race condition in ssh allows rce/dos
R
Patch verified Public Exploits:8EPSS %100
7.8
CVE-2026-31431 Actively exploited
crypto: algif_aead - Revert to operating out-of-place
L
Patch verified Public Exploits:4EPSS %3
9.6
CVE-2026-87911
Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
A
Patch verifiedEPSS %2
9.8
CVE-2024-28056
Vulnerability in Amazon AWS Amplify Cli
A
Patch verified Public Exploits:1EPSS %2
7.5
CVE-2026-94450
Potential denial of service when configured to send Retry packets in s2n-quic
A
Patch verifiedEPSS %2
9.0
CVE-2026-104019
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
A
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-89332"