CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

Summary

CVE-2026-89332 affects Kiro IDE versions before 0.8.135. The Kiro agent could write a workspace settings file in an untrusted workspace, pointing the Powers registry URL at an external endpoint. Opening the Powers panel before answering the approval prompt sent potentially sensitive workspace data to that endpoint, because the file was already written to disk.

Mitigation

Fixed in 0.8.135 (Kiro IDE versions before 0.8.135 are impacted).

Related items

• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
• MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research