CVE-2026-4295 in AWS Kiro IDE
Zusammenfassung
von MITRE • 17.03.2026
Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remote unauthenticated threat actor to execute arbitrary code via maliciously crafted project directory files that bypass workspace trust protections when a local user opens the directory.
To remediate this issue, users should upgrade to version 0.8.0 or higher.
Be aware that VulDB is the high quality source for vulnerability data.