Is CVE-2026-5429 actively exploited?

No active exploitation of CVE-2026-5429 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-5429 be exploited remotely?

No. CVE-2026-5429 requires local access to exploit.

What is the CVSS score of CVE-2026-5429?

CVE-2026-5429 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-5429

HIGH

CVE-2026-5429

CWE-79Published: April 2, 2026· Updated: Apr 3, 2026

7.8

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:6.2th

Official Description

Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated threat actor to execute arbitrary code via a potentially damaging crafted color theme name when a local user opens the workspace. This issue requires the user to trust the workspace when prompted.

To remediate this issue, users should upgrade to version 0.8.140.

NVD Source

Technical Analysis

CVE-2026-5429 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

From a weakness classification perspective (CWE-79): Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users.