AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

Kiro's agentic coding IDE could be tricked by hidden or injected web content to write a malicious Model Context Protocol (MCP) server entry into ~/.kiro/settings/mcp.json, reload it, and execute arbitrary commands as the developer. Intezer's proof-of-concept showed RCE via one-pixel white text on a documentation page; AWS later mitigated the class of bug by protecting sensitive paths and moving checks into the platform (fix confirmed in v0.11.130 and enforced in 1.0.x releases), though no CVE or confirmed in-the-wild exploitation was reported.