Amazon Kiro Crew
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Amazon Kiro Crew.
Recent Amazon Kiro Crew Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 2026-10-20 | CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew | October 20, 2026 |
By the Year
In 2026 there have been 1 vulnerability in Amazon Kiro Crew with an average score of 9.9 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 9.90 |
It may take a day or so for new Kiro Crew vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Amazon Kiro Crew Security Vulnerabilities
Missing authorization in the WhatsApp group channel in Kiro Crew might
CVE-2026-112380
9.9 - Critical
- October 20, 2026
Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. To remediate this issue, users should upgrade to version 0.7.2.
AuthZ
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Amazon Kiro Crew or by Amazon? Click the Watch button to subscribe.
