Kiro CLI (<2.27.0) Local File Permission Disclosure
CVE-2026-124848 Published on November 10, 2026
Incorrect default permissions on session transcripts and prompt history in Kiro CLI
Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created its local session storage files with permissions that made them readable by all local users.
To remediate this issue, users should upgrade to Kiro CLI version 2.27.0 or later and launch it once. Users who ran Amazon Q Developer CLI 1.16.0 through 1.19.x should also delete the ~/.aws/amazonq/.cli_bash_history file or restrict it to the owner.
Vulnerability Analysis
CVE-2026-124848 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
Products Associated with CVE-2026-124848
stack.watch emails you whenever new vulnerabilities are published in Amazon Aws or Amazon Kiro Cli. Just hit a watch button to start following.
