{"data":{"id":"6e776283-44c4-4088-80db-7d038e08e49d","title":"CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration","summary":"CVE-2026-89332 affects Kiro IDE versions before 0.8.135. The Kiro agent could write a workspace settings file in an untrusted workspace, pointing the Powers registry URL at an external endpoint. Opening the Powers panel before answering the approval prompt sent potentially sensitive workspace data to that endpoint, because the file was already written to disk.","solution":"Fixed in 0.8.135 (Kiro IDE versions before 0.8.135 are impacted).","labels":["security"],"sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-111-aws/","publishedAt":"2026-09-11T19:08:25.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Kiro IDE","Kiro agent","Kiro Powers"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-11T19:08:25.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}