CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
CVE-2026-112407
Summary
Bulletin ID: 2026-140-AWS
Scope: AWS
Content Type: Important (requires attention)
Publication Date: 10/20/2026 13:00 PM PDT
Description:
Kiro Crew is an open-source personal AI agent that can be reached from a web dashboard, a CLI, or messaging channels such as WhatsApp, and that runs tools on the operator's machine.
We identified CVE-2026-112380, an authorization issue in the WhatsApp channel and the internal subagent run-control endpoints. In certain configurations where a WhatsApp group was added to an operator's allowed groups, or where the direct-message policy was set to open, a member of that WhatsApp group could send instructions to another session's subagent.
The subagent then executed those instructions on the operator's machine under that session's approval policy, and the resulting audit trail was attributed to the operator rather than the actual sender.
The default configuration is not affected: whatsapp.groups defaults to empty and whatsapp.dm_policy defaults to self, so a group that is not explicitly listed is dropped before dispatch.
Impacted versions: >=0.4.0 AND <0.7.2
Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Read the article
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 1
Updates
- Published by AWS
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.