AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
- Posted on July 21, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges, bypassing approval.
