Lifeboat Foundation: Safeguarding Humanity
Toggle light / dark theme

Blog

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges, bypassing approval.

Leave a Comment

Lifeboat Foundation respects your privacy! Your email address will not be published.

/* */