Kiro CLI before 2.10.0 Uncontrolled Search Path Exec
CVE-2026-18657 Published on August 4, 2026

Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows
An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user starts Kiro CLI in the directory. To remediate this issue, users should upgrade to version 2.10.0 or higher.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-18657 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a DLL preloading Vulnerability?

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVE-2026-18657 has been classified to as a DLL preloading vulnerability or weakness.


Products Associated with CVE-2026-18657

Want to know whenever a new CVE is published for Amazon Kiro Cli? stack.watch will email you.

Amazon Kiro Cli
 

Affected Versions

Amazon Kiro CLI: