# CVE-2026-112380: Kiro Crew missing authorization in WhatsApp group channel

Source: https://junglewise.ai/threats/cve-2026-112380-missing-authorization-in-the-whatsapp-group-channel-in-kiro-crew  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-20. Updated: 2026-10-20  
License: CC BY 4.0 with a link back

CVE-2026-112380 · Severity: critical · CVSS 9.9 · Published 2026-10-20

Kiro Crew is an open-source AI agent tool that runs commands on an operator's machine and can be controlled via WhatsApp messaging. A missing authorization check in the WhatsApp group feature allows an attacker who is a member of a configured group to send messages that execute arbitrary commands on the operator's machine, bypassing access controls and framing the operator as the source of the actions.

Technologies: [Amazon AWS](https://junglewise.ai/threats/technologies/aws). Vendors: [Amazon](https://junglewise.ai/threats/vendors/amazon).

## Quick answers

**Is CVE-2026-112380 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-112380 being exploited in the wild.

**How severe is CVE-2026-112380?** Critical severity, with a CVSS score of 9.9, published 20 October 2026.

**Which products and versions are affected?** Kiro Crew 0.4.0 to 0.7.1.

**Is there a fix for CVE-2026-112380?** Yes: fixed in 0.7.2. Until then: Remove all entries from whatsapp.groups configuration and keep whatsapp.dm_policy set to self (the default setting), which ensures group traffic is dropped before dispatch. Alternatively, disable the WhatsApp channel entirely until the upgrade is applied.</anigation>
<parameter name="timeline">[{"kind":"disclosed","at":"2026-10-20"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-112380 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-112380?** Check whether you run Amazon AWS or Kiro Crew at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 0.7.2

Remove all entries from whatsapp.groups configuration and keep whatsapp.dm_policy set to self (the default setting), which ensures group traffic is dropped before dispatch. Alternatively, disable the WhatsApp channel entirely until the upgrade is applied.</anigation>
<parameter name="timeline">[{"kind":"disclosed","at":"2026-10-20"}]

## Technical details

The vulnerability is an authorization bypass in Kiro Crew's WhatsApp channel and subagent run-control endpoints. An authenticated member of an operator-configured WhatsApp group can send instructions to other sessions' subagents, which execute those instructions under the receiving session's approval policy while attributing the audit trail to the operator. The attack requires the WhatsApp group to be explicitly listed in the configuration; the default configuration is not affected since whatsapp.groups defaults to empty and dm_policy defaults to self.

## Affected products

- Kiro Kiro Crew 0.4.0 to 0.7.1

## References

- [https://aws.amazon.com/security/security-bulletins/2026-140-aws/](https://aws.amazon.com/security/security-bulletins/2026-140-aws/)
- [https://github.com/kirodotdev/KiroCrew/releases/tag/v0.7.2](https://github.com/kirodotdev/KiroCrew/releases/tag/v0.7.2)

## Related threats

- [An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0)](https://junglewise.ai/threats/cve-2026-126793-privilege-escalation-in-aurora-postgresql-dialect-detection-in)
- [AWS SDK for pandas EMR unverified bucket ownership](https://junglewise.ai/threats/cve-2026-127119-unverified-ownership-of-the-default-emr-cluster-log-location-in)
- [Amazon mcp-gateway-registry server-side request forgery in registration API](https://junglewise.ai/threats/cve-2026-125926-server-side-request-forgery-in-the-server-registration-and)
- [Amazon mcp-gateway-registry authorization bypass in management API](https://junglewise.ai/threats/cve-2026-100307-missing-authorization-on-the-external-management-api-in-mcp)
- [AWS Kiro CLI incorrect default permissions on session files](https://junglewise.ai/threats/cve-2026-124848-incorrect-default-permissions-on-session-transcripts-and-prompt)