CVE-2026-124848

MEDIUM 5.5

Incorrect default permissions on session transcripts and prompt history in Kiro CLI

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created its local session storage files with permissions that made them readable by all local users. To remediate this issue, users should upgrade to Kiro CLI version 2.27.0 or later and launch it once. Users who ran Amazon Q Developer CLI 1.16.0 through 1.19.x should also delete the ~/.aws/amazonq/.cli_bash_history file or restrict it to the owner.

CWE	CWE-276
Vendor	amazon
Product	kiro cli
Published	Nov 10, 2026

Stay Ahead of the Next One

Get instant alerts for amazon kiro cli

Be the first to know when new medium vulnerabilities affecting amazon kiro cli are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Amazon / Kiro CLI

1.16.0 < 2.27.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

kiro.dev: https://kiro.dev/changelog/cli/2-27/ aws.amazon.com: https://aws.amazon.com/security/security-bulletins/2026-178-aws/