CVE-2026-9255: Tool Execution Without Authorization via Piped Stdin in Kiro CLI
Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to execute arbitrary tools, including shell commands, without user approval by crafting content that is piped to kiro-cli via stdin.
We recommend you to upgrade to kiro-cli version 1.28.0 or later.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiro CLI (kiro-cli)to a version that resolves this vulnerability.Fixed in 1.28.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9255?
The severity of CVE-2026-9255 is rated as high, with a score of 7.8.
How do I fix CVE-2026-9255?
To fix CVE-2026-9255, upgrade to Kiro CLI version 1.28.0 or later.
What are the risks associated with CVE-2026-9255?
CVE-2026-9255 allows local attackers to execute arbitrary tools and shell commands without user approval, posing a significant risk to system security.
Who is affected by CVE-2026-9255?
Users of Kiro CLI before version 1.28.0 are affected by CVE-2026-9255 due to the lack of input source validation.
What is the main issue of CVE-2026-9255?
The main issue of CVE-2026-9255 is the missing input source validation in the tool authorization prompt, allowing unauthorized execution of commands.