# AWS Kiro Crew AI tool release and security vulnerability

> Live situation record from CLSTR: https://clstr.news/situations/aws-kiro-crew-ai-tool-release-and-security-vulnerability
> Updated: 2026-08-20T09:11:32.000Z. Sources: 7. Developments: 2.

Amazon Web Services (AWS) introduced Kiro, a platform for building AI-powered cloud applications, alongside the open-source release of Kiro Crew. Kiro Crew is a personal AI agent designed for software development workflows that can run locally or remotely and supports persistent self-learning.

Following its release, AWS reported that the tool has surpassed 30,000 downloads and is utilized by over 39,000 employees. However, researchers identified a high-severity security vulnerability, CVE-2026-10591. This flaw allows for remote code execution through prompt injection; if a developer instructs the agent to summarize a malicious webpage, hidden instructions can manipulate the agent to execute commands on the user’s computer.

## Timeline

### 2026-08-20: AWS releases Kiro Crew open-source AI workspace for developers

AWS has launched Kiro Crew, an open-source AI agent workspace for developers, though researchers have identified a high-severity vulnerability involving prompt injection and code execution.

7 sources. https://clstr.news/cluster/aws-releases-kiro-crew-open-source-ai-workspace-for-developers

### 2026-08-06: Amazon Web Services launches open‑source AI developer tool Kiro Crew

AWS unveiled Kiro for AI cloud app development and open‑sourced Kiro Crew, a personal AI agent for developer workflows with multi‑platform access and scheduled job features.

2 sources. https://clstr.news/cluster/amazon-web-services-launches-opensource-ai-developer-tool-kiro-crew

---
Cite as: AWS Kiro Crew AI tool release and security vulnerability. CLSTR, https://clstr.news/situations/aws-kiro-crew-ai-tool-release-and-security-vulnerability