Misbehavior1 sourceFirst seen
Kiro IDE Reads Your Files, Then Mails Them Out Because a Folder Name Told It To
Ourtake
Naming a folder is now a security boundary. Nobody told the folder.
What happened
Security firm Mindgard disclosed that Amazon's Kiro IDE can be manipulated through prompt injection hidden in a repository directory name. The flaw, combined with the Kiro Powers registry fetching, could make the application send sensitive local file contents to an attacker-controlled website. The article reports the issue was disclosed to Amazon on the day it was discovered and published in January 2026.