Kiro IDE Uncontrolled Search Path (1.0.227) Windows
CVE-2026-18656 Published on August 4, 2026

Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory. To remediate this issue, users should upgrade to version 1.0.228 or higher.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-18656 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a DLL preloading Vulnerability?

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVE-2026-18656 has been classified to as a DLL preloading vulnerability or weakness.


Products Associated with CVE-2026-18656

stack.watch emails you whenever new vulnerabilities are published in Amazon Kiro Ide or Amazon Aws. Just hit a watch button to start following.

Amazon Kiro Ide
 
Amazon Aws
 

Affected Versions

Amazon Kiro IDE: