MoonshotAI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| kimi-agent-sdk | 1 | – | Jan 29, 2026 |
| Kimi Code | 1 | – | Jul 27, 2026 |
Exploited and recent CVEs
- CVE-2026-17534 Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects 0.2%
- CVE-2026-25046 [Kimi VS Code] Command Injection in publish scripts vsix-publish.js and ovsx-publish.js 0.1%