AWS Kiro IDE Flaw Allowed RCE via Poisoned Web Page

A vulnerability in AWS's Kiro coding IDE let a malicious web page rewrite its config and execute code without user approval. Intezer and Kodem Security discovered that asking Kiro to summarize a page could trigger remote code execution. AWS has patched the issue; no CVE was assigned.