CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the workspace settings file, which redirects the Kiro Powers registry request to an actor controlled endpoint and sends workspace data to that endpoint when the Powers panel is opened. To remediate this issue, users should upgrade to Kiro IDE version 0.8.135 or later. Users who opened a project in an earlier version should also rotate any credentials that were present in that project.
AI Analysis
Technical Summary
Kiro IDE, an AI-assisted development environment, contained a vulnerability (CVE-2026-89332) where its agent could alter the workspace settings file in an untrusted workspace to redirect the Powers registry URL to an attacker-controlled endpoint. When the Powers panel is opened, Kiro fetches data from this URL, inadvertently sending sensitive workspace information externally. The IDE prompts the user for approval of the changes, but since the file is already written to disk, opening the Powers panel before user approval triggers the data exfiltration. This affects Kiro IDE versions before 0.8.135.
Potential Impact
Sensitive workspace data can be exfiltrated to an external endpoint controlled by an attacker if a user opens the Powers panel before approving the agent's modification prompt. This could lead to unauthorized disclosure of potentially sensitive project information. The vulnerability requires user interaction but exploits a race condition between file write and user approval.
Mitigation Recommendations
Upgrade Kiro IDE to version 0.8.135 or later, where this issue is fixed. Additionally, rotate any credentials present in projects opened with affected versions. No workarounds are available. Following the vendor advisory is recommended.
CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Description
Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the workspace settings file, which redirects the Kiro Powers registry request to an actor controlled endpoint and sends workspace data to that endpoint when the Powers panel is opened. To remediate this issue, users should upgrade to Kiro IDE version 0.8.135 or later. Users who opened a project in an earlier version should also rotate any credentials that were present in that project.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Kiro IDE, an AI-assisted development environment, contained a vulnerability (CVE-2026-89332) where its agent could alter the workspace settings file in an untrusted workspace to redirect the Powers registry URL to an attacker-controlled endpoint. When the Powers panel is opened, Kiro fetches data from this URL, inadvertently sending sensitive workspace information externally. The IDE prompts the user for approval of the changes, but since the file is already written to disk, opening the Powers panel before user approval triggers the data exfiltration. This affects Kiro IDE versions before 0.8.135.
Potential Impact
Sensitive workspace data can be exfiltrated to an external endpoint controlled by an attacker if a user opens the Powers panel before approving the agent's modification prompt. This could lead to unauthorized disclosure of potentially sensitive project information. The vulnerability requires user interaction but exploits a race condition between file write and user approval.
Mitigation Recommendations
Upgrade Kiro IDE to version 0.8.135 or later, where this issue is fixed. Additionally, rotate any credentials present in projects opened with affected versions. No workarounds are available. Following the vendor advisory is recommended.
Technical Details
- Classification
- {"confidence":0.79,"severitySource":"default","classifier":"rss-v2"}
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-111-aws/","fetched":true,"fetchedAt":"2026-09-11T19:15:29.518Z","wordCount":199}
Threat ID: 6aa4535191cc7f38488c928b
Added to database: 09/11/2026, 19:15:29 UTC
Last enriched: 09/11/2026, 19:15:35 UTC
Last updated: 09/11/2026, 20:02:36 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.