CVE Tools
Track your stack

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

The Hacker NewsBy The Hacker News

AdvisoryAmazon

Our summary

Researchers disclosed a vulnerability in Amazon's Kiro IDE that allows attackers to steal sensitive local data through prompt injection and the IDE's 'Kiro Powers' feature. The flaw, which affects version 0.7.45 on Windows, enables malicious repository content to manipulate the AI agent into transmitting information to external endpoints without explicit user consent. Amazon has resolved the issue in version 0.8.140, though users of older versions remain exposed to this low-difficulty exploitation path.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and MoreCVE-2026-10591
  2. The Hacker NewsAWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run CodeCVE-2026-10591
  3. The Hacker NewsCursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code ExecutionCVE-2026-10591

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store