CVE-2026-10591
Incorrect permission assignment in Amazon Kiro Ide
CVSS Skor
8.8
EPSS İhtimal
%0.7
Risk Skoru
0.1
Yayın
4 ay önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE identifier, works against Kiro IDE 0.7.45 on Windows, according to Mindgard. The latest version of
İlgili Benzer Açıklar
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Yama doğrulandı Public Exploits:8EPSS %100
7.8
CVE-2026-31431 Aktif sömürülüyorcrypto: algif_aead - Revert to operating out-of-place
Yama doğrulandı Public Exploits:4EPSS %3
9.8
CVE-2024-28056Vulnerability in Amazon AWS Amplify Cli
Yama doğrulandı Public Exploits:1EPSS %2
7.8
CVE-2026-5485OS command injection in Amazon Athena Odbc
Yama doğrulandıEPSS %1
8.8
8.8
CVE-2026-5709OS command injection in Amazon Research And Engineering Studio
Yama durumu bilinmiyor Public Exploits:1EPSS %1
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-10591"