TI-2026-15290 Aliases CVE-2026-18657 GHSA-vr58-qjgp-x52v

Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows

LOW 38CWE-427Published 2026-08-04 · Updated 2026-08-05

Key facts

Attack vector: Local
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user starts Kiro CLI in the directory. To remediate this issue, users should upgrade to version 2.10.0 or higher.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00233 14th percentileScored 2026-11-07

Fix Fixed Kiro CLI (Amazon): 2.10.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
AWS	Kiro CLI	before 2.10.0	2.10.0	Patch available	CNA

Kiro CLI VendorAWS Affected before 2.10.0 Fixed in 2.10.0 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:amazon:kiro_cli::::::::	before 2.10.0	Vulnerable	AWS
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft

cpe:2.3:a:amazon:kiro_cli:*:*:*:*:*:*:*:* Versions before 2.10.0 Vulnerable ·AWS
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

Fix · CNA Kiro CLI (Amazon) Fixed in 2.10.0

Timeline

2026-10-02 Threatist record created from CVE-2026-18657
2026-10-03 Alias added: GHSA-vr58-qjgp-x52v

References

Patch 1

https://kiro.dev/changelog/cli/2-10/

Advisory 1

https://aws.amazon.com/security/security-bulletins/2026-074-aws/

TI-2026-08131 Tool Execution Without Authorization via Piped Stdin in Kiro CLI CVSS 4.0HIGH 8.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences