Vulnerabilities
Essential Guide: CVE-2026-0830 - Command Injection in Kiro GitLab Merge Request Helper
CVE ID : CVE-2026-0830 Published : Jan. 9, 2026, 9:10 p.m. | 17 minutes ago Description : Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces. To mitigate, users should update to version 0.6.18. Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
GitLab
Impact:
command injection
Source: Telegram CVE Monitor