bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Tuesday, November 10, 2026

Kiro CLI Security Fix: Local Users Could Read Your Session Data

Kiro CLI versions 1.16.0 through 2.27.0 have a permission bug on macOS and Linux that lets other local users peek at your session transcripts and prompt history—including credentials and source code. **Action required:** upgrade to version 2.27.0 or later immediately. This is a local privilege issue, so it only affects shared systems.

source: [aws/security-bulletin]