Affected Vendor(s)
Affected Product(s)
Summary
The Amazon Kiro IDE is vulnerable to a data exfiltration issue that can be exploited through steering file directives. By carefully crafting a steering file to read a local file and render a Markdown image, an attacker can coerce the AI send sensitive data to an external server.
Timeline
Credit
Blog Post
References
Mindgard, the leading provider of AI security solutions, helps enterprises discover, assess, and defend their AI systems. Spun out from over a decade of AI security research at Lancaster University and headquartered in Boston and London, Mindgard combines AI red teaming with offensive security expertise and AI research to identify exploitable vulnerabilities in AI models, agents, and applications before attackers do.
