Which versions of Kiro IDE are affected by EUVD-2026-52911?

Amazon Kiro IDE versions before 1.0.228 for Windows contain a remote code execution vulnerability (CVSS 8.5) with no public exploit identified at time of analysis.. A patch is available.

How to fix or mitigate EUVD-2026-52911?

Within 24 hours, identify all Kiro IDE installations in your development environment and notify users to avoid opening untrusted project directories until patched. Within 7 days, deploy Amazon Kiro IDE version 1.0.228 or later across all affected systems using your standard patch management process. Within 30 days, verify patch compliance, review project directories opened during the vulnerability window for suspicious activity, and reinforce security policies on handling external project files.

Kiro IDE EUVD-2026-52911

Q: What is the CVSS score of EUVD-2026-52911?

EUVD-2026-52911 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

| CVE-2026-18656 HIGH

Uncontrolled Search Path Element (CWE-427)

2026-08-04 AMZN

GHSA-hhmj-6g9r-9vvq

RCE Microsoft Kiro Ide Amazon

8.5

CVSS 4.0 · Vendor: AMZN

Severity by source

Vendor (AMZN) PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local attack vector as victim must open the directory on their own machine; no privileges required of attacker; user interaction required to open crafted directory; full C/I/A impact from arbitrary code execution.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (AMZN).

CVSS VectorVendor: AMZN

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 20:38 vuln.today

CVSS changed

Aug 04, 2026 - 20:22 NVD

7.8 (HIGH) 8.5 (HIGH)

CVE Published

Aug 04, 2026 - 19:35 cve.org

HIGH 8.5

DescriptionCVE.org

An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory.

To remediate this issue, users should upgrade to version 1.0.228 or higher.

AnalysisAI

Remote code execution via uncontrolled search path (CWE-427) in Amazon Kiro IDE before 1.0.228 on Windows allows an unauthenticated remote actor to execute arbitrary code on a victim's machine by supplying a maliciously crafted project directory containing a strategically placed executable. Exploitation requires the local user to open the attacker-controlled directory, at which point Kiro IDE resolves an uncontrolled search path and executes the malicious binary, bypassing workspace trust protections intended to prevent exactly this class of attack. No public exploit has been identified at time of analysis, and a vendor-released patch is available at version 1.0.228.

Technical ContextAI

CWE-427 (Uncontrolled Search Path Element) occurs when an application uses an externally controllable directory in its executable search path without adequate validation. In Kiro IDE, when a project directory is opened, the IDE appears to search for executables along a path that can be influenced by the contents of that directory - meaning an attacker who controls the directory structure can pre-position a malicious executable where the IDE will find and run it before a legitimate system binary. The vulnerability is specific to Windows, where DLL and executable search order is a well-documented attack surface. Kiro IDE's workspace trust subsystem, which is designed to warn users before executing code from untrusted directories, is bypassed by this attack path. The affected CPE is cpe:2.3:a:amazon:kiro_ide:*:*:*:*:*:*:*:* covering all versions prior to 1.0.228.

RemediationAI

Upgrade Kiro IDE to version 1.0.228 or later, which is confirmed by the vendor to resolve this issue. The patch is documented at https://kiro.dev/changelog/ide/1-0/#patch-1-0-228, and the AWS security bulletin is at https://aws.amazon.com/security/security-bulletins/2026-074-aws/. Until patching is possible, avoid opening project directories received from untrusted or unverified sources. As a compensating control, review any externally sourced project directories for unexpected executables before opening them in Kiro IDE - particularly in root-level or common tool subdirectories (e.g., .vscode, .kiro, bin, scripts). Restricting execution permissions on project directories opened from untrusted sources via Windows AppLocker or Software Restriction Policies can reduce risk, though configuration complexity makes this impractical as a universal workaround. Note that the workspace trust bypass means the IDE's built-in warning mechanism cannot be relied upon as a mitigating control prior to patching.