Kiro Prompt Injection Vulnerability
Evidence indicates that Kiro is affected by a security issue. Reported affected versions include 0.7.45.
What Happened
Evidence indicates that Kiro is affected by a security issue. Reported affected versions include 0.7.45.
Why This Matters
Publisher reporting describes a security event affecting ide. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.
Recommended Action
Confirm whether ide is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.
Exposure
Exposure unknown
Aug 27, 2026 19:09
Exposure reason: This incident does not currently match a technology in My Interests.
Exploitation status: UNKNOWN
Affected versions: 0.7.45
Primary entities:
Timeline
-
Incident first seen
Aug 27, 2026 19:09BugSkan first recorded this incident.
-
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Aug 27, 2026 19:09thehackernews.com · Vulnerability
Sources
thehackernews.com · Aug 27, 2026 19:09
Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE identifier, works against Kiro IDE 0.7.45 on Windows, according to Mindguard. The latest version of
Open publisher sourceRelated Incidents
Other BugSkan incidents that share identifiers, products, or vendors with this report.
My Interests Match
Create an account to see which incidents overlap with your interests.