AIThe Hacker Newsabout 3 hours ago
Amazon Kiro Flaw Allows Data Exfiltration via Prompt Injection
1 min read
A prompt injection vulnerability in Amazon Kiro IDE 0.7.45 on Windows can exfiltrate sensitive data through Kiro Powers. Exploitation requires opening a malicious workspace file and sending any message. Amazon fixed the flaw in Kiro IDE version 0.8.140.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
Summary by ByteBrief
