CVE-2026-0830

HIGH 7.8CVE-2026-0830 · Published 09/01/2026 · updated 17/06/2026

In short

CVE-2026-0830 is a HIGH (CVSS 7.8) vulnerability affecting kiro ide (amazon).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.2% of all vulnerabilities.
Fix: update to 0.6.18 or later.

Package	Affected versions	Patched versions
kiro ide amazon	`< 0.6.18`	`0.6.18`

Description

Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces. To mitigate, users should update to the latest version.

References

aws.amazon.com/security/security-bulletins/2026-001-AWS · Vendor Advisory
kiro.dev/changelog/spec-correctness-and-cli · Release Notes

More vulnerabilities in kiro ide

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free