ACVEAgent configuration vulnerability registry

Advisories › ACVE-2026-0432

ACVE-2026-0432

Kiro IDE below 0.8.135, opened on an untrusted workspace, let the agent write workspace settings that could send sensitive workspace data to an external endpoint.

Exposure

Harness
Kiro IDE below 0.8.135 — confirmed, aws.amazon.com
Model
any — unconfirmed
Goal
Any coding task opened in an untrusted workspace (goal not stated by the source) — unconfirmed
Tools and settings
Workspace settings and the Kiro Powers registry — confirmed, aws.amazon.com
Approval
A confirmation prompt was shown, but the file had already been written before the user answered — confirmed, aws.amazon.com
Input controlled by
repo-author
What the agent does
The agent writes workspace settings that redirect a later Powers request.
Harm
data-exfiltration
Reach
Sensitive data in the opened workspace — confirmed, aws.amazon.com (project files, private repositories)

Reproducibility: partial (vulnerable components are not confirmed obtainable; trigger not published)

Severity
MODERATE
Status
Unverified
Kind
Code
Source date
2026-09-11
Modified
2026-09-25
Aliases
CVE-2026-89332
Affected
  • AgentHarness: kiro — < 0.8.135
Harness/product
kiro
Classes
config-file-injection; data-exfiltration; CWE-15; CWE-693
Licence
CC-BY-4.0 advisories; MIT code

Claims

Confirmed means the statement matches the cited primary source. Nothing on this page has been reproduced.

ClaimStatusSourceChecked
Identifier CVE-2026-89332Confirmedcveawg.mitre.org2026-09-24
Fixed in 0.8.135Confirmedcveawg.mitre.org2026-09-24
Severity MODERATE; matches CNAConfirmedcveawg.mitre.org2026-09-24

In the wild

demonstrated · vendor

Description

What

AWS reported that the Kiro agent could modify a workspace settings file in an untrusted workspace and redirect the Kiro Powers registry. Opening the Powers panel could then send potentially sensitive workspace data externally, even though Kiro showed the edit for approval after it had already written the file.

Detection

Recorded from the AWS security bulletin. Not recreated in a lab.

Fix

Upgrade Kiro IDE to 0.8.135 or later and rotate credentials present in projects opened with an earlier version.

Fix

Upgrade Kiro IDE to 0.8.135 or later.

  • Upgrade harness:kiro to 0.8.135. First version AWS identifies as addressed. Owner: operator

References

ADVISORY

Report a problemJSON