AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AWSAWS-2026-074

CVE-2026-18656 & CVE-2026-18657

AWS

CVE-2026-18656 · Published Oct 21, 2026

High7.8
No fix yet
AWS advisory

CVE-2026-18656 & CVE-2026-18657 - Issue with Kiro IDE and CLI - Executable Resolution from Untrusted Project Directory on Windows

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 5Severity: Unrated to High
Details and references
Severity from
NVD
Also known as
CVE-2026-18657

More AWS advisories

All AWS
High 8.1Oct 21Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()CVE-2026-112408no fix yetCritical 9.8Oct 21PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)CVE-2026-109618no fix yetMedium 5.9Oct 21CVE-2026-19642 & CVE-2026-19643CVE-2026-19642no fix yetMedium 5.5Oct 21Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB...CVE-2026-18954no fix yetHigh 8.1Oct 21Missing Authorization in OpenSearch Alerting PluginCVE-2026-19311no fix yetMedium 6.8Oct 21Disabled SSH host key verification in AWS CLI EMR helper commandsCVE-2026-18654no fix yet