Amazon Vulnerabilities and Affected Products
Vulnerabilities associated with Kiro IDE.
Products
Clear product- Amazon Athena ODBC driver6 vulnerabilities
- data.all5 vulnerabilities
- Amazon Redshift JDBC Driver2 vulnerabilities
- Fire TV Stick 3rd gen2 vulnerabilities
- WorkSpaces Client2 vulnerabilities
- Amazon Ion Dotnet1 vulnerability
- Amazon Music Player1 vulnerability
- Amazon Redshift ODBC Driver1 vulnerability
- Amazon Redshift Python Connector1 vulnerability
- Amazon WorkSpaces1 vulnerability
- Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware1 vulnerability
- Amazon.IonDotnet1 vulnerability
- Amplify Studio1 vulnerability
- AppStream 2.0 Client1 vulnerability
- Aurora MySQL1 vulnerability
- AWS ALB Route Directive Adapter For Istio1 vulnerability
- AWS EFS CSI Driver1 vulnerability
- AWS SDK1 vulnerability
- aws-dataall1 vulnerability
- aws-load-balancer-controller1 vulnerability
- aws_alb_route_directive_adapter_for_istio1 vulnerability
- aws_client_vpn1 vulnerability
- Blink XT2 Sync Module firmware1 vulnerability
- Cloud Cam1 vulnerability
- DCV Client1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-18656HIGH | Executable Resolution from Untrusted Project Directory in Kiro IDE on WindowsAn uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory. To remediate this issue, users should upgrade to version 1.0.228 or higher. CWE-427Aug 4, 2026 | CVSS8.5v4.0 | EPSS0.159% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |