CVE-2026-11931
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Kiro IDE on macOS and Linux before version 0.11.133 has incorrect default permissions that could expose the authentication token cache file to other local users or processes. The file permissions are set to 0644 instead of 0600.
Risk Assessment
Organizations may be exposed to unauthorized access to authentication tokens, potentially leading to security breaches and data loss.
Recommendation
It is recommended to upgrade Kiro IDE to version 0.11.133 or later. After upgrading and restarting the application, the cache file permissions will be automatically updated.
Other vulnerabilities in Kiro IDE
See all- CVE-2026-18656High
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory.
- CVE-2026-5429High
In Kiro IDE before version 0.8.140, unsanitized input during web page generation in the Kiro Agent webview allows a remote unauthenticated attacker to execute arbitrary code via a crafted color theme name. This requires the user to trust the workspace when prompted.
Original NVD description (English source)
Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or processes via world-readable permissions (0644) instead of owner-restricted permissions (0600). To remediate this issue, users should upgrade to Kiro IDE version 0.11.133 or later. After upgrading and restarting the application, the cache file permissions are automatically updated on the next token refresh. Users operating in a multi-user environment can invalidate existing tokens by reauthenticating.