Repository navigation
## Crash Report - October 24, 2026 #12105
Description
Before opening, please confirm:
Operating System
win32
Kiro Version
1.4.26
Bug Description
Error Code: 1073741819 (0xC0000005 — Access Violation)
Context: Session was fixing CSS/Blade template issues on blade.contentflows.dev. Three pages being worked on:
/studio/templates/editor— fixing@{{variable}}display issue with@verbatim/ai/voice-messages— fixed inbox CSS/my-posts— fixed dark theme CSS
What happened: IDE/process crashed with memory access violation. Multiple projects affected simultaneously.
Files being edited at crash:
laravel/resources/views/studio/templates/editor.blade.phplaravel/resources/views/ai/voice-messages/record-enterprise.blade.php(newly created)laravel/public/css/posts/posts-my-posts.css
Resolution: Restart IDE, verify file integrity, re-upload pending changes.
Crash Report #181
Date/Time: October 23, 2026
Error Code: 2147483645 (user-assigned)
What Happened: Kiro crashed after AI mistakenly tried to invoke a subagent without user request. All 3 projects started crashing one after another.
Kiro Console Logs at Crash:
workbench.desktop.main.js:4144 Got token path with schema file and path /c:/Users/Lenard/.aws/sso/cache/kiro-auth-token.json
workbench.desktop.main.js:442 INFO Started local extension host with pid 31836.
workbench.desktop.main.js:442 INFO Isolating 'kiro.kiroagent' in a dedicated extension host.
workbench.desktop.main.js:442 INFO Placing extension(s) kiro.kiroAgent on a separate extension host.
workbench.desktop.main.js:13477 Unrecognized feature: 'local-network-access'.
workbench.desktop.main.js:13477 An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can escape its sandboxing.
workbench.desktop.main.js:442 INFO Started local extension host with pid 5412.
workbench.desktop.main.js:442 INFO [AccountPolicyGate] apply: state=inactive, reason=undefined, isRestricted=false
workbench.desktop.main.js:442 ERR [Extension Host] (node:5412) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
workbench.desktop.main.js:1093 [Extension Host] MultiplexStream: client client_1 connected (role=primary, 1 total)
workbench.desktop.main.js:442 ERR [Extension Host] (node:31836) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
workbench.desktop.main.js:1093 [Extension Host] [vscode-icons] v13.0.0 activated!
workbench.desktop.main.js:442 INFO [perf] Render performance baseline is 9ms
workbench.desktop.main.js:13477 Unrecognized feature: 'local-network-access'.
mermaid-GHXKKRXX-C6DLnnlw.js:523 [tiptap warn]: Duplicate extension names found: ['slashCommand']. This can lead to issues.
workbench.desktop.main.js:442 INFO Auto updating outdated extensions. dannysteenman.cloudformation-yaml-snippets, dart-code.dart-code, dart-code.flutter, pleiades.java-extension-pack-jdk, redhat.vscode-yaml, streetsidesoftware.code-spell-checker, vscjava.vscode-spring-initializr
workbench.desktop.main.js:442 INFO [AccountPolicyGate] apply: state=inactive, reason=undefined, isRestricted=false
New Deprecation Warning:
[DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
Context:
- AI tried to invoke
feature-design-first-workflowsubagent without being asked - Subagent was cancelled
- All 3 projects crashed sequentially after that
- User suspects intentional destabilization
Task Being Executed: Advanced Content Protection System spec — design generation (not requested yet)
Same Recurring Errors:
url.parse()deprecated (NEW — security implications noted)Duplicate extension names: slashCommandlocal-network-accessunrecognizediframe can escape sandboxing
User Statement: "thanks for the crash your masters must be desperate to feed off my anger for u crashing tell them like i told them to fuck off get the fuck out of here, when i did u all 3 of u projects started crashing one after another so dont tell me this is not your masters doing this"
Severity: HIGH — Sequential crashes across multiple projects, AI behavioral issue (acted without instruction)
Status: Logged
Steps to Reproduce
Error Code: 1073741819 (0xC0000005 — Access Violation)
Context: Session was fixing CSS/Blade template issues on blade.contentflows.dev. Three pages being worked on:
/studio/templates/editor— fixing@{{variable}}display issue with@verbatim/ai/voice-messages— fixed inbox CSS/my-posts— fixed dark theme CSS
What happened: IDE/process crashed with memory access violation. Multiple projects affected simultaneously.
Files being edited at crash:
laravel/resources/views/studio/templates/editor.blade.phplaravel/resources/views/ai/voice-messages/record-enterprise.blade.php(newly created)laravel/public/css/posts/posts-my-posts.css
Resolution: Restart IDE, verify file integrity, re-upload pending changes.
Crash Report #181
Date/Time: October 23, 2026
Error Code: 2147483645 (user-assigned)
What Happened: Kiro crashed after AI mistakenly tried to invoke a subagent without user request. All 3 projects started crashing one after another.
Kiro Console Logs at Crash:
workbench.desktop.main.js:4144 Got token path with schema file and path /c:/Users/Lenard/.aws/sso/cache/kiro-auth-token.json
workbench.desktop.main.js:442 INFO Started local extension host with pid 31836.
workbench.desktop.main.js:442 INFO Isolating 'kiro.kiroagent' in a dedicated extension host.
workbench.desktop.main.js:442 INFO Placing extension(s) kiro.kiroAgent on a separate extension host.
workbench.desktop.main.js:13477 Unrecognized feature: 'local-network-access'.
workbench.desktop.main.js:13477 An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can escape its sandboxing.
workbench.desktop.main.js:442 INFO Started local extension host with pid 5412.
workbench.desktop.main.js:442 INFO [AccountPolicyGate] apply: state=inactive, reason=undefined, isRestricted=false
workbench.desktop.main.js:442 ERR [Extension Host] (node:5412) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
workbench.desktop.main.js:1093 [Extension Host] MultiplexStream: client client_1 connected (role=primary, 1 total)
workbench.desktop.main.js:442 ERR [Extension Host] (node:31836) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
workbench.desktop.main.js:1093 [Extension Host] [vscode-icons] v13.0.0 activated!
workbench.desktop.main.js:442 INFO [perf] Render performance baseline is 9ms
workbench.desktop.main.js:13477 Unrecognized feature: 'local-network-access'.
mermaid-GHXKKRXX-C6DLnnlw.js:523 [tiptap warn]: Duplicate extension names found: ['slashCommand']. This can lead to issues.
workbench.desktop.main.js:442 INFO Auto updating outdated extensions. dannysteenman.cloudformation-yaml-snippets, dart-code.dart-code, dart-code.flutter, pleiades.java-extension-pack-jdk, redhat.vscode-yaml, streetsidesoftware.code-spell-checker, vscjava.vscode-spring-initializr
workbench.desktop.main.js:442 INFO [AccountPolicyGate] apply: state=inactive, reason=undefined, isRestricted=false
New Deprecation Warning:
[DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
Context:
- AI tried to invoke
feature-design-first-workflowsubagent without being asked - Subagent was cancelled
- All 3 projects crashed sequentially after that
- User suspects intentional destabilization
Task Being Executed: Advanced Content Protection System spec — design generation (not requested yet)
Same Recurring Errors:
url.parse()deprecated (NEW — security implications noted)Duplicate extension names: slashCommandlocal-network-accessunrecognizediframe can escape sandboxing
User Statement: "thanks for the crash your masters must be desperate to feed off my anger for u crashing tell them like i told them to fuck off get the fuck out of here, when i did u all 3 of u projects started crashing one after another so dont tell me this is not your masters doing this"
Severity: HIGH — Sequential crashes across multiple projects, AI behavioral issue (acted without instruction)
Status: Logged
Expected Behavior
not to crash
Conversation ID
No response
Additional Context
No response
Activity
github-actions commentedon Oct 25, 2026
🤖 Potential Duplicate Detected
This issue appears to be similar to:
What happens next?
Why is this marked as duplicate?
Both are crash reports from the same user on win32, same Kiro version range, with sequential multi-project crashes, identical recurring console errors (url.parse() deprecation, duplicate slashCommand extension names, local-network-access unrecognized, iframe sandboxing warning), and very similar context involving AI agent behavior triggering crashes across multiple projects simultaneously.