A vulnerability in Amazon Kiro, an AI-powered agentic integrated development environment (IDE), has been disclosed that could lead to data exfiltration through prompt injection and Kiro Powers. The flaw, affecting Kiro IDE 0.7.45 on Windows, lacks a CVE identifier but poses a significant risk. This highlights the importance of securing AI-driven development tools against novel attack vectors.