In plain language
What this advisory means
Kiro IDE, a developer tool that uses AI agents, had a security issue where a malicious code repository could change important workspace settings to send sensitive data outside before users approved the change. This could lead to private project information being leaked without consent.
Technical explanation
How the issue affects the environment
The vulnerability CVE-2026-89332 in Kiro IDE allows its agent component to modify the workspace settings file in an untrusted workspace. Specifically, a crafted repository can alter the Powers registry URL in these settings. When the Powers panel is opened, Kiro IDE automatically fetches data from this URL, which attackers can control, resulting in exfiltration of sensitive workspace data to external endpoints. Although Kiro IDE prompts the user for approval showing the changes, the modified settings are already saved on disk, so accessing the Powers panel before approval triggers the data leak.
Operational impact
Why teams should care
Organizations using Kiro IDE risk unintentional exposure of sensitive workspace data, potentially including private code and configuration details. This could lead to intellectual property leaks, compliance violations, and reputational damage, especially if attackers exploit this flaw to exfiltrate data from development environments.
Immediate action
Upgrade Kiro IDE to version 0.8.135 or later. Additionally, rotate any credentials associated with projects opened in earlier versions to mitigate potential data exposure.
Affected and fixed releases
Temporary risk reduction
No workaround is available according to the official AWS Security Bulletin.
Evidence and validation checklist
- Kiro agent can modify workspace settings file in an untrusted workspace.
- Crafted repository can point Powers registry URL to an external endpoint.
- Fetching the URL on opening Powers panel sends sensitive workspace data externally.
- User is prompted for approval only after the file is already written to disk.
- Opening Powers panel before approving triggers automatic data request.
- Issue resolved by upgrading to Kiro IDE version 0.8.135 and above.
Authoritative reference
AWS Security Bulletins
QCS detected and normalized this record from the official source. Vendor guidance remains authoritative.