What is CVE-2026-18656?
CVE-2026-18656: An uncontrolled search path vulnerability in Kiro IDE before version 1.0.228 on Windows could allow remote code execution when a local user opens a maliciously crafted project directory. This bypasses workspace trust protections, so updating to version 1.0.228 or later is crucial.
Azərbaycanca: CVE-2026-18656: Kiro IDE-nin Windows üçün 1.0.228-dən əvvəlki versiyalarında "uncontrolled search path" zəifliyi aşkar edilib. Bu, lokal istifadəçi xüsusi hazırlanmış layihə qovluğunu açdıqda, pərəstişkarın etibar mexanizmlərini keçərək uzaqdan kod icrasına səbəb ola bilər. İstifadəçilər dərhal 1.0.228 və ya daha yeni versiyaya yeniləməlidir.
FAQ2
Which versions of Kiro IDE are affected by CVE-2026-18656?
This vulnerability affects Kiro IDE versions prior to 1.0.228 on Windows.
What is the potential impact of exploiting CVE-2026-18656 in Kiro IDE?
This vulnerability could lead to remote code execution (RCE) when a local user opens a maliciously crafted project directory.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.