CVE-2026-10591
Bulletin ID: 2026-037-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/02/2026 08:45 AM PDT Description: Kiro is an agentic IDE users install on their desktop. We identified CVE-2026-10591. Insufficient access control restrictions in the file write tool in Kiro IDE prior to version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vscode/tasks.json), enabling auto-execution on folder open. Impacted versions: <0.11 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
CSIRTS triage
- What
- Insufficient file write restrictions may allow remote unauthenticated actors to execute arbitrary commands.
- Who is affected
- Users of Kiro IDE versions prior to 0.11.
- Urgency
- Remediation is important due to the risk of arbitrary command execution.
- Action
- Upgrade to Kiro IDE version 0.11 or later.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-10591
Get an email if CVE-2026-10591 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.
Advisory coverage (1)
- unknownCVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Pathsaws · 2026-06-05
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-10591)