Amazon Kiro IDE

• CVE-2026-95985 High 8.8 Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces 0.1%
• CVE-2026-18656 High 7.8 Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows 0.2%