CVE-2026-9255

HighCVSS 7.8

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Kiro CLI before version 1.28.0 lacks input source validation in the tool authorization prompt. A local attacker can execute arbitrary tools, including shell commands, without user approval by crafting content piped via stdin.

Risk Assessment

The risk is that a local attacker can execute arbitrary commands in the context of the user running kiro-cli, potentially leading to privilege escalation or data theft.

Recommendation

Upgrade kiro-cli to version 1.28.0 or later, which includes a fix for input source validation.

Other vulnerabilities in Kiro CLI

CVE-2026-18657High
An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user starts Kiro CLI in the directory. To remediate this issue, users should upgrade to version 2.10.0 or higher.

Original NVD description (English source)

Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin. We recommend you to upgrade to kiro-cli version 1.28.0 or later.