Amazon Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

A vulnerability exists in Amazon Kiro IDE versions prior to 0.11, where insufficient access control in the file write tool may allow remote unauthenticated actors to execute arbitrary commands. This is achieved by crafting instructions that write to execution-sensitive paths, such as .vscode/tasks.json, which can trigger auto-execution when the folder is opened.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands, potentially allowing for malicious actions to be performed automatically when a folder is opened in the IDE.

Remediation

Users should upgrade to Kiro IDE version 0.11 or later.