CVE-2026-95985 - Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

Published 2026-09-24T17:21:34Z•3339aa7b467a6824e5b3ddd3a50091f7d553001d1707fd0c138e4eacadedc909

Source metadata

Publication date
2026-09-24T17:21:34Z
Source identifier
03455c2144e791380a40ec9007ceebcd6600a99b
Public record ID
record:sha256:3339aa7b467a6824e5b3ddd3a50091f7d553001d1707fd0c138e4eacadedc909

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
aws_security_bulletins
Record identifier
3339aa7b467a6824e5b3ddd3a50091f7d553001d1707fd0c138e4eacadedc909
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.