Kiro IDE Command Injection (CVE-2026-0830)
Date: 2025
Affected: Kiro IDE Command Injection (CVE-2026-0830)
Attack vector: rce
Category: real-world
Severity: Medium
CVE: CVE-2026-0830

Command injection in AWS Kiro's helper function for querying Git repository state. The workspace path itself could force unintended command execution. Fixed in Kiro v0.6.18.


Mitigations:

Architectural layers (MAESTRO):