CVE-2026-18657 | Kiro CLI up to 2.9.x Workspace Trust untrusted search path

A vulnerability, which was classified as critical, was found in Kiro CLI up to 2.9.x. This affects an unknown function of the component Workspace Trust. Executing a manipulation can lead to untrusted search path.

The identification of this vulnerability is CVE-2026-18657. The attack can only be executed locally. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More