As cited
Copy frozen at (site build).
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ai security
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Researchers disclosed a prompt injection vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered IDE, that enables attackers to exfiltrate data through Kiro Powers. The flaw affects Kiro IDE 0.7.45 on Windows and lacks a CVE identifier. Mitigation details remain incomplete in available sources.
Why it matters: Developers using Amazon Kiro for code development face risk of credential or source code theft through malicious prompts; teams should verify their Kiro version and monitor for exploitation attempts.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ai security
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Researchers disclosed a prompt injection vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered IDE, that enables attackers to exfiltrate data through Kiro Powers. The flaw affects Kiro IDE 0.7.45 on Windows and lacks a CVE identifier. Mitigation details remain incomplete in available sources.
Why it matters: Developers using Amazon Kiro for code development face risk of credential or source code theft through malicious prompts; teams should verify their Kiro version and monitor for exploitation attempts.
- Source published
- First seen by Cybersecurity Tracker