CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew

Summary

CVE-2026-112380 is an authorization flaw in the WhatsApp channel and the internal subagent run-control endpoints of Kiro Crew, affecting versions >=0.4.0 and <0.7.2. In configurations where a WhatsApp group was added to allowed groups or the direct-message policy was set to open, a group member could send instructions to another session's subagent, which executed them on the operator's machine, with the audit trail attributed to the operator. The default configuration is not affected.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• MediumCVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDKSame vendor · AWS Security Bulletins
• HighCVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRFSame vendor · AWS Security Bulletins
• HighCVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker DistributionSame vendor · AWS Security Bulletins
• CriticalCVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWSSame vendor · AWS Security Bulletins
• HighCVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scanSame vendor · AWS Security Bulletins