CVE-2026-5429
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
In Kiro IDE before version 0.8.140, unsanitized input during web page generation in the Kiro Agent webview allows a remote unauthenticated attacker to execute arbitrary code via a crafted color theme name. This requires the user to trust the workspace when prompted.
Risk Assessment
An attacker can take over the user's workstation, leading to full system compromise and potential data loss.
Recommendation
Immediately upgrade Kiro IDE to version 0.8.140 or later.
Other vulnerabilities in Kiro IDE
See all- CVE-2026-18656High
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory.
- CVE-2026-11931Medium
Kiro IDE on macOS and Linux before version 0.11.133 has incorrect default permissions that could expose the authentication token cache file to other local users or processes. The file permissions are set to 0644 instead of 0600.
Original NVD description (English source)
Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated threat actor to execute arbitrary code via a potentially damaging crafted color theme name when a local user opens the workspace. This issue requires the user to trust the workspace when prompted. To remediate this issue, users should upgrade to version 0.8.140.