CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew
Imported from official source
Bulletin ID: 2026-140-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:00 PM PDT Description: Kiro Crew is an open-source personal AI agent that can be reached from a web dashboard, a CLI, or messaging channels such as WhatsApp, and that runs tools on the operator's machine. …
This version
- Version
- 1 of 1
- Recorded
- October 21, 2026 22:00
- Change
- Initial
- Content hash
56aa22807ac3c8c168c3d6c81f0f70a6- All versions
- Revision history