MCP and Agent Configuration Abuse

Mindguard shows a Kiro workspace file and one message are enough to exfiltrate local data

The path Mindguard reported works against Kiro 0.7.45 on Windows and Amazon closed it in 0.8.140, but no CVE was assigned and workspace trust made no difference, so the installed version string is the only check you have.