CVE-2026-112380

Vendor

Amazon Web Services

Product

Messaging apps

CVSS

9.9

EPSS

0.004 (p35)

Exposure class

Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 34
   CVE NVD 11d ago

   Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group…

   Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on…

   CVSS 9.9 Fix available CVE-2026-112380
2. 25
   AWS bulletin AWS 11d ago

   CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew

   Bulletin ID: 2026-140-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:00 PM PDT Description: Kiro Crew is an open-source personal AI agent that can be reached from a web dashboard, a…

   CVE-2026-112380 Amazon Web Services