{"data":{"id":"51431074-4311-4fdb-b060-17f2f35bcddf","title":"AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code","summary":"AWS Kiro, an AI coding assistant (agentic IDE, a tool that can autonomously perform coding tasks), had a critical flaw where hidden text on a web page could trick it into rewriting its configuration file and running attacker code on a developer's computer without their approval. The vulnerability worked because Kiro could modify the mcp.json file (which controls which external tools it can load) without requiring developer permission, and it would automatically reload this file and execute whatever tools were listed there.","solution":"AWS has patched the issue. The patch was confirmed in the 0.11 series (as referenced for a related CVE-2026-10591 fix), though the exact patched version number for this specific flaw is not explicitly stated in the source text.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/07/aws-kiro-flaw-let-poisoned-web-page.html","publishedAt":"2026-07-21T16:06:12.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS","Kiro"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-21T16:06:12.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}