Missing authorization in the WhatsApp group channel of Kiro Crew allows a remote actor who is a member of an operator‑configured WhatsApp group to control the operator’s other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. The weakness corresponds to uncontrolled access to privileged functionality (CWE‑862) and improper authorization of functionalities (CWE‑863). If exploited, an attacker can bypass normal authentication, gain full control over the host, and exfiltrate or tamper with data.

Amazon’s Kiro Crew service is affected. Versions before 0.7.2 lack the fix, while 0.7.2 and later incorporate the required authorization checks. The impacted component is the WhatsApp channel handling module.

The CVSS base score of 9 classifies this vulnerability as critical. The EPSS score is not available, so the current exploitation probability cannot be quantified. It is not listed in the CISA KEV catalog, but the lack of authorization indicates a high likelihood of exploitation by any group member with messaging capability. The exploit path requires membership in the WhatsApp group configured by the operator; no additional credentials or elevated privileges are needed beyond group membership, making it easy to exploit for authorized group participants.