cve-2026-10591

Aug 7, 2026 4 min read

AWS Kiro: Prompt Injection Rewrote Config Files for Silent RCE

CVE-2026-10591 in AWS Kiro allowed a hidden prompt injection payload on a web page to silently rewrite the IDE's MCP server config and execute attacker code with developer privileges, bypassing all user-approval prompts.