CVE-2026-10591

Named by 3 kept items in this workspace.

Search every workspace for CVE-2026-10591. It matches the name as written, so it can find other things that share it.

The items that name it 3

Top Agentic AI security resources — August 2026
article2026-07-31
Hidden one-pixel text on a web page made Kiro rewrite its own mcp.json and auto-launch an attacker-controlled MCP server with developer privileges; source: Intezer researchers
AWS Kiro RCE: Prompt Injection to Code Execution | Kodem
writeup2026-07-19It is written here as CVE-2026-10591 (AWS Kiro agentic IDE RCE via unprotected ~/.kiro/settings/mcp.json; provided by Amazon in July 22, 2026 along with a security bulletin).
AWS Kiro agentic IDE RCE via unprotected ~/.kiro/settings/mcp.json; provided by Amazon in July 22, 2026 along with a security bulletin
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
article

All cves in this workspace.