External risk intelligence

Kiro Crew WhatsApp Group Authorization Bypass Allows Command Execution.

CVE advisorySeverity: CRITICAL (CVSS 9.0)

CVE-2026-112380

The vulnerability requires the attacker to be a member of a specific, operator-configured WhatsApp group to influence the application. While the application utilizes network-based communication, the requirement to be an authorized participant in a third-party messaging group significantly limits the potential for direct, unauthenticated internet-facing exploitation, making widespread public exposure unlikely.

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory details a critical vulnerability in Kiro Crew, a technology that enables remote control of agent sessions. The issue stems from missing authorization within WhatsApp group channels, potentially allowing a malicious actor, already a member of a configured group, to compromise other agent sessions and execute commands on the host system.

Unauthorized group members can control other agent sessions.
Critical flaw could allow arbitrary command execution.
Confirm relevance and exposure within your Kiro Crew deployment.

Attack Path

How an attacker could exploit the issue

An attacker who is already a member of a specific, operator-configured WhatsApp group can exploit a missing authorization flaw. By sending specially crafted messages to this group, the attacker can gain control over other agent sessions managed by the Kiro Crew operator and potentially execute arbitrary commands on the host system.

Requires attacker to be group member.
Triggered by sending messages to a group.
Risks session control and command execution.

Live Threat

Current exploitation, exposure, and threat context

A remote actor, already a member of an operator-configured WhatsApp group, could potentially take control of other agent sessions and run arbitrary commands on the host system through specially crafted messages sent to that group. This scenario requires the attacker to be an authenticated member of a specific, operator-defined WhatsApp group to initiate the attack.

Operator agent sessions and host commands could be at risk.
Exploitation occurs via messages sent to a WhatsApp group.
Unauthorized control over agent sessions may result.

Operational Fix

Recommended remediation, mitigation, and detection steps

The Kiro Crew application owner or the platform team managing the Kiro Crew deployment should lead remediation efforts. The first practical step is to identify all instances of Kiro Crew, confirm if they are reachable by authorized WhatsApp group members, and determine their criticality to operations before planning an upgrade.

Application or platform teams own this issue.
Verify Kiro Crew instances and reachability.
Plan and execute the upgrade to the latest version.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Kiro Crew?

Kiro Crew is a software tool designed to manage and facilitate the remote control of various agent sessions. It integrates with external communication channels, such as WhatsApp group channels, to enable operators to coordinate and issue instructions across their agent infrastructure.

What does CWE-862 mean for CVE-2026-112380?

CWE-862 refers to missing authorization. In the context of this CVE, it means the software fails to verify whether a user has the proper permission to perform a specific action within a WhatsApp group. Because this check is missing, an attacker can perform sensitive tasks, like taking control of agent sessions or running commands on the host, that they are not supposed to be allowed to do.

How is this vulnerability triggered?

An attacker triggers this by sending specially crafted messages to a WhatsApp group that is configured for Kiro Crew operations. Critically, the attacker must already be an authorized member of that specific group to send these messages. The vulnerability is not triggered by unauthorized individuals outside of the operator-configured WhatsApp group.

Is my deployment vulnerable?

According to Halo Surface Signal, widespread exploitation is unlikely because the attacker must be an authorized participant in a third-party messaging group. You should assess your environment by identifying Kiro Crew instances that are connected to operator-configured WhatsApp groups, as these represent the primary path for potential unauthorized activity.

What should I do to address this risk?

The primary response is to upgrade your Kiro Crew installation to version 0.7.2. Before applying the update, identify all active instances of the software and evaluate which ones are reachable by members of your configured WhatsApp groups to prioritize your remediation efforts.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.