An important AWS security bulletin has been issued regarding Kiro Crew, an open-source personal AI agent. This bulletin highlights CVE-2026-112380, an authorization vulnerability. The issue specifically affects the WhatsApp channel and internal subagent run-control endpoints. In certain configurations, a member of an authorized WhatsApp group could send instructions to another session's subagent. This subagent would then execute the instructions on the operator's machine. The audit trail would incorrectly attribute these actions to the operator, not the sender. The default configuration of Kiro Crew is not affected by this vulnerability. This is because the default settings for WhatsApp groups and direct message policies prevent unauthorized access. The vulnerability impacts Kiro Crew versions from 0.4.0 up to, but not including, 0.7.2. Users are advised to consult the linked article for complete and updated information.