Amazon Kiro Ide vulnerabilities

• amazon kiro ide Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces CVE-2026-95985 8.6 HighSeptember 24, 2026
• amazon kiro ide Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows CVE-2026-18656 8.5 HighAugust 4, 2026