CVE-2026-18656— Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
Possible ATT&CK Techniques 2AI
T1195 · Supply Chain Compromise T1059 · Command and Scripting InterpreterGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-18656
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
Source: CVE Program / CVE List V5
Vulnerability Description
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the directory. To remediate this issue, users should upgrade to version 1.0.228 or higher.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-18656
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18656
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-18656 (1)
Vendor Pages for CVE-2026-18656 (1)
IV. Related Vulnerabilities
Same product: Kiro IDE
- CVE-2026-11931
Insecure Permissions on Authentication Token Cache File in K - CVE-2026-10591
Kiro IDE Insufficient File Write Restrictions to Execution-S - CVE-2026-5429
Kiro IDE Webview Cross-Site Scripting via Workspace Color Th - CVE-2026-4295
Arbitrary code execution via crafted project files in Kiro I - CVE-2026-0830
Command Injection in Kiro GitLab Merge Request Helper
Same vendor: Amazon
- CVE-2026-18657
Executable Resolution from Untrusted Project Directory in Ki - CVE-2026-16318
QUIC Transport Parameters Memory Leak During HelloRetryReque - CVE-2026-15746
Credential disclosure in Strands Agents Tools elasticsearch_ - CVE-2026-15738
Cross-namespace traffic interception via incorrect route pre - CVE-2026-8178
Remote Code Execution via Unsafe Class Loading in Amazon Red
Same weakness: CWE-427
- CVE-2026-66344
NetKids iMark越权搜索路径导致提权漏洞 - CVE-2026-18657
Executable Resolution from Untrusted Project Directory in Ki - CVE-2026-18718
Ghidra Swift Demangler Analyzer Arbitrary Code Execution via - CVE-2026-18605
CheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sy - CVE-2026-9593
iDTM FDI Unauthorized Debug Interface Enablement
V. Comments for CVE-2026-18656
No comments yet