PT-2026-2030 · Kiro Ide · Kiro Ide

Published 2026-01-09 · Updated 2026-04-28 · CVE-2026-0830

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiro IDE versions prior to 0.6.18

Description Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper. This occurs when opening maliciously crafted workspaces. The issue involves the processing of workspace folder names, potentially leading to the execution of unintended commands.

Recommendations Update Kiro IDE to version 0.6.18 or later.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-0830

Affected Products

Kiro Ide

References · 12

• https://kiro.dev/changelog/spec-correctness-and-cli · Patch
• https://aws.amazon.com/security/security-bulletins/2026-001-AWS · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0830 · Security Note
• https://twitter.com/DCICyberSecNews/status/2010741325642244162 · Twitter Post
• https://twitter.com/AwsSecDigest/status/2010698729309798504 · Twitter Post
• https://twitter.com/CVEnew/status/2009741111661621304 · Twitter Post
• https://t.me/cveNotify/161245 · Telegram Post
• https://twitter.com/AwsSecDigest/status/2037256529414340754 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2009853918625284122 · Twitter Post
• https://t.me/CVEtracker/41876 · Telegram Post
• https://twitter.com/eyalestrin/status/2011792807498039433 · Twitter Post
• https://twitter.com/RandomDhiraj/status/2010388751281967157 · Twitter Post