CVE-2026-11931 - Insecure Permissions on Authentication Token Cache File in Kiro IDE

Kiro Ide ยท 2026-08-20

Actions

Rate this issue

Technical Details

Affected Versions < 0.11.133
Regions all
CVE IDs CVE-2026-11931
Migration Required Yes
Cost Impact Neutral
IaC Impact High

What This Means

For DevOps Teams

Update Kiro IDE to version 0.11.133 to address CVE-2026-11931 and ensure secure permissions on the authentication token cache file.

For Platform Teams

Deploy the updated Kiro IDE version 0.11.133 to enhance security and prevent unauthorized access to authentication tokens.

For Executives

Implement the latest Kiro IDE version 0.11.133 to mitigate the security risk of exposed authentication tokens due to insecure permissions.

Source

View original AWS announcement โ†’

Related Kiro Ide Updates

Weekly AWS Digest in Your Inbox

No spam, no headlines. Just a weekly summary of the 3โ€“7 AWS changes that matter for DevOps and Platform teams.

๐Ÿ“ง Exactly 1 email per week โ€ข Every Tuesday โ€ข Unsubscribe anytime

Today: AWS only. Coming next: Azure and other major clouds.