# CVE-2026-95985: Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

> CVE-2026-95985: Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces. CVSS 8.8 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-95985
Last updated: 2026-09-24T19:36:39Z

- Published: 2026-09-24 17:07 UTC · Updated: 2026-09-24 19:36 UTC · Assigner: AMZN
- CVSS: 8.8 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS: 0.14%, 3th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-349, CWE-829

## Description

The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace, sending any message can cause agent modifications to auto-loaded global configuration paths. We recommend you upgrade to Kiro IDE version 1.0.242 or later. Users who ran the agent in an untrusted workspace on an earlier version should also review the global Kiro configuration directory (~/.kiro) for entries they did not create.

## Affected vendors and products

- Amazon: Kiro IDE

## Tracked companies

- [Amazon Web Services](https://rewindex.com/company/aws.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-95985)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-95985)
- [https://aws.amazon.com/security/security-bulletins/2026-117-aws/](https://aws.amazon.com/security/security-bulletins/2026-117-aws/)
- [https://kiro.dev/changelog/ide/1-0-242/](https://kiro.dev/changelog/ide/1-0-242/)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-95985 · Markdown: https://rewindex.com/cve/CVE-2026-95985.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-95985 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:11:00.726Z