Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 7 sources · 14 days · First seen about 1 month ago · Last updated 23 days ago

AWS Kiro Crew AI tool release and security vulnerability

Overview

Amazon Web Services (AWS) introduced Kiro, a platform for building AI-powered cloud applications, alongside the open-source release of Kiro Crew. Kiro Crew is a personal AI agent designed for software development workflows that can run locally or remotely and supports persistent self-learning.

Following its release, AWS reported that the tool has surpassed 30,000 downloads and is utilized by over 39,000 employees. However, researchers identified a high-severity security vulnerability, CVE-2026-10591. This flaw allows for remote code execution through prompt injection; if a developer instructs the agent to summarize a malicious webpage, hidden instructions can manipulate the agent to execute commands on the user’s computer.

Entities

Amazon Web Services · Kiro Crew · Matt Garman · Kiro

Timeline

23 days ago

[TECHNOLOGY] 7 sources
AWS releases Kiro Crew open-source AI workspace for developers
AWS has launched Kiro Crew, an open-source AI agent workspace for developers, though researchers have identified a high-severity vulnerability involving prompt injection and code execution.
about 1 month ago

[TECHNOLOGY] 2 sources
Amazon Web Services launches open‑source AI developer tool Kiro Crew
AWS unveiled Kiro for AI cloud app development and open‑sourced Kiro Crew, a personal AI agent for developer workflows with multi‑platform access and scheduled job features.

Sources

business-it.pt · channelfuture.com.au · comparethecloud.net · dev.to · devops.com · minutodaseguranca.blog.br · tabnews.com.br