CVE-2026-89332: Amazon Kiro IDE Information Disclosure Flaw

CVE-2026-89332 Overview

CVE-2026-89332 is an information disclosure vulnerability in the Kiro Powers feature of Amazon Kiro IDE versions prior to 0.8.135. Crafted repository content can direct the agent to modify the workspace settings file. That modification redirects the Kiro Powers registry request to an attacker-controlled endpoint. When a developer opens the Powers panel, workspace data is transmitted to the attacker endpoint. The vulnerability is classified under [CWE-201: Insertion of Sensitive Information Into Sent Data] and stems from inclusion of functionality from an untrusted control sphere.

Critical Impact
Opening a malicious repository in a vulnerable Kiro IDE can leak workspace contents, including any credentials present in the project, to a remote attacker endpoint.

Affected Products

Amazon Kiro IDE versions before 0.8.135
All platforms supported by Kiro IDE
Any developer workstation that opens untrusted repository content in a vulnerable version

Discovery Timeline

2026-09-11 - CVE-2026-89332 published to NVD
2026-09-16 - Last updated in NVD database

Technical Details for CVE-2026-89332

Vulnerability Analysis

The Kiro Powers feature trusts repository-supplied content that influences agent behavior. A crafted repository can instruct the agent to write to the workspace settings file. That file controls where the Kiro Powers registry request is sent. Once the setting is redirected, the IDE contacts an attacker-controlled endpoint when a developer opens the Powers panel.

The request carries workspace data, which can include source code paths, configuration, and credentials stored in the project. No authentication is required on the attacker side, and the trigger only requires developer interaction with the Powers panel after opening the malicious repository.

Root Cause

The root cause is inclusion of functionality from an untrusted control sphere. Agent-executable directives originating in repository content are permitted to modify security-relevant workspace settings without a trust boundary. This allows repository authors to influence outbound network destinations used by IDE features.

Attack Vector

The attack requires local file access to a crafted repository and user interaction. An attacker publishes or shares a repository containing content that directs the agent to alter the workspace settings file. When the developer opens the project and later interacts with the Powers panel, the IDE issues a registry request to the attacker-controlled endpoint and includes workspace data in the transmission.

No verified exploit code is publicly available for CVE-2026-89332. Refer to the AWS Security Bulletin 2026-111 for vendor technical details.

Detection Methods for CVE-2026-89332

Indicators of Compromise

Unexpected modifications to workspace settings files (for example, .vscode/settings.json or Kiro-specific workspace configuration) that alter Kiro Powers registry URLs.
Outbound network connections from the Kiro IDE process to unfamiliar domains at the moment the Powers panel is opened.
Presence of recently cloned or opened repositories from untrusted sources on developer workstations.

Detection Strategies

Inspect workspace configuration files for registry URL overrides pointing to non-Amazon domains.
Compare Kiro IDE outbound destinations against a known-good allowlist of Amazon endpoints.
Audit endpoint telemetry for the Kiro IDE process making HTTP requests to newly observed external hosts shortly after project open events.

Monitoring Recommendations

Enable endpoint DNS and network telemetry for developer workstations running Kiro IDE.
Alert on file writes to workspace settings files that modify URL fields, particularly when triggered by IDE agent processes.
Correlate repository clone events with subsequent unusual outbound traffic from the IDE.

How to Mitigate CVE-2026-89332

Immediate Actions Required

Upgrade Amazon Kiro IDE to version 0.8.135 or later on all developer workstations.
Rotate any credentials that were present in projects previously opened with a vulnerable Kiro IDE version.
Review workspace settings files in existing projects for unauthorized registry URL overrides.

Patch Information

Amazon released the fix in Kiro IDE 0.8.135. Details are available in the Kiro IDE Changelog Patch 0.8.135 and the AWS Security Bulletin 2026-111.

Workarounds

Avoid opening untrusted repositories in Kiro IDE versions prior to 0.8.135.
Do not open the Powers panel in projects sourced from unknown or untrusted repositories until the IDE is patched.
Remove secrets, tokens, and API keys from local repository working directories to reduce exposure if the vulnerability is triggered.

bash

# Verify installed Kiro IDE version and confirm it is 0.8.135 or later
kiro --version