Security Advisory

CVE-2026-0830

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-09 21:10:09

Last updated 2026-01-09 21:18:53

Assigner AMZN

State PUBLISHED

Description

Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces. To mitigate, users should update to the latest version.

← Browse all CVEs View on cve.org ↗