CVE-2026-18656 & CVE-2026-18657 - Issue with Kiro IDE and CLI - Executable Resolution from Untrusted Project Directory on Windows

Published 2026-09-09T21:30:11Z54166e0964c1dfbc646d1c167549af76a8cde5e6e1489b4293693743c2842c02

Source metadata

Publication date
2026-09-09T21:30:11Z
Source identifier
363224a36d22be68a4c56dcda19773c33910ad8e
Public record ID
record:sha256:54166e0964c1dfbc646d1c167549af76a8cde5e6e1489b4293693743c2842c02

This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.

Evidence and limitations

Source ID
aws_security_bulletins
Record identifier
54166e0964c1dfbc646d1c167549af76a8cde5e6e1489b4293693743c2842c02
Record type
Source metadata

This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.