Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

AI Security Incident Case: Amazon Kiro Prompt Injection Vulnerability Analysis

NSFOCUS Security Labs
NSFOCUS Security Labs
Published September 10, 2026Original Report

Excerpt

Overview On August 27, 2026, cybersecurity research firm Mindgard publicly disclosed a prompt injection vulnerability in Amazon Kiro IDE. Kiro is an AI-driven development environment launched by Amazon, equipped with an agent capable of reading/writing repository files, invoking native tools, and triggering IDE features. Discovered and reported on December 11, 2025 (tested on Kiro 0.7.45 for Windows), Amazon completed remediation in January 2026 and released a fix in version…

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-10591MediumScore 56/100First seen

IOC Relationship Graph

Building graph…