Diamond Member ThaHaka 0 Posted July 21 Diamond Member Share Posted July 21 This is the hidden content, please Sign In or Sign Up Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a developer's machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary as asking Kiro to summarize a page could end in remote code execution. AWS has patched the issue, and no CVE has been This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/322466-h4ckn3wsaws-kiro-flaw-let-a-poisoned-web-page-rewrite-its-config-and-run-code/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.