THREATOPS
THREAT OPS › Threat News › AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection

AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection

lowembracetheredPublished 2025-08-26

<a id="top_ref"></a>

<p>On the day <a href="https://github.com/kirodotdev/Kiro">AWS Kiro</a> was released, I couldn&rsquo;t resist putting it through some of my <a href="https://monthofaibugs.com">Month of AI Bugs</a> security tests for coding agents.</p> <p><a href="https://embracethered.com/blog/images/2025/episode26-yt.png"><img alt="Kiro - Episode 26" src="https://embracethered.com/blog/image

Indicators of compromise

Original source: https://embracethered.com/blog/posts/2025/aws-kiro-aribtrary-command-execution-with-indirect-prompt-injection/