AWS releases Kiro Crew open-source AI workspace for developers

Amazon Web Services (AWS) has released Kiro Crew, an open-source workspace designed for developers. The tool allows AI agents to maintain context across multiple sessions, enabling them to handle complex workflows such as incident investigations, code migrations, and ticket triaging without requiring repetitive prompts.

Developed by engineers Bolin Chen, Joe Guo, and Zezhen Xu, the tool runs on local hardware and utilizes a seven-layer security approach. AWS reported that the tool is already used by over 39,000 employees and has surpassed 30,000 downloads since its release.

However, researchers have identified a security vulnerability (CVE-2026-10591) categorized as 'High' severity. The flaw demonstrates how prompt injection via a malicious webpage can lead to remote code execution. If a developer asks the AI agent to summarize a compromised page, the hidden instructions can manipulate the agent's context to execute commands on the victim's computer.