Bulletin ID: 2026-178-AWS
Scope: AWS
Content Type: Important (requires attention)
Publication Date: 11/10/2026 12:45 PM PST

Description:

Kiro CLI is an AI coding assistant that runs in the terminal.

We identified CVE-2026-124848, an issue in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux. Kiro CLI created its session transcript and prompt history files with permissions that allowed other local users on the same host to read them. Another local user might read a user's prompts, model responses and tool output, including any credentials or source code they contain.

Impacted versions: Kiro CLI >= 1.16.0 AND < 2.27.0

Resolution:

This issue has been addressed in Kiro CLI version 2.27.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes. Users should launch the upgraded Kiro CLI once so existing session files are restricted to the owner. Users who ran Amazon Q Developer CLI 1.16.0 through 1.19.x should also delete the ~/.aws/amazonq/.cli_bash_history file or restrict it to the owner.

Workarounds:

Users who cannot upgrade immediately can restrict access to the owner by running "chmod -R go-rwx ~/.kiro" on macOS and Linux, and by running "umask 077" in the shell before launching Kiro CLI so that new files are created owner-only. Users who ran Amazon Q Developer CLI 1.16.0 through 1.19.x should also run "chmod go-rwx ~/.aws/amazonq/.cli_bash_history".

References:

• CVE-2026-124848

Please email aws-security@amazon.com with any s ecurity questions or concerns.