CVE-2026-10591 | Amazon AWS Kiro IDE up to 0.10 File Write Tool vscode/tasks.json permission assignment

A vulnerability has been found in Amazon AWS Kiro IDE up to 0.10 and classified as critical. The impacted element is an unknown function of the file vscode/tasks.json of the component File Write Tool. The manipulation leads to incorrect permission assignment.

This vulnerability is traded as CVE-2026-10591. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.