Kiro CLI Security Fix: Local Users Could Read Your Session Data
Kiro CLI versions 1.16.0 through 2.27.0 have a permission bug on macOS and Linux that lets other local users peek at your session transcripts and prompt history—including credentials and source code. **Action required:** upgrade to version 2.27.0 or later immediately. This is a local privilege issue, so it only affects shared systems.
source: [aws/security-bulletin]