« Volver al listado

CVE-2026-17534

Estado: Pendiente de análisisMedia (5.5)—

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Moonshot AI — Kimi-codeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-17534",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-17534",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-07-27T10:23:54.927637Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "reefs@jfrog.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "reefs@jfrog.com",
      "affectedData": [
        {
          "repo": "git://github.com/MoonshotAI/kimi-code",
          "vendor": "MoonshotAI",
          "product": "Kimi Code",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "0.27.0",
              "versionType": "semver"
            }
          ],
          "packageName": "@moonshot-ai/kimi-code",
          "programFiles": [
            "packages/agent-core-v2/src/app/web/providers/local-fetch-url.ts",
            "packages/agent-core/src/tools/providers/local-fetch-url.ts",
            "packages/agent-core-v2/src/agent/permissionPolicy/policies/default-tool-approve.ts"
          ],
          "collectionURL": "https://github.com/MoonshotAI/kimi-code",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-07-27T10:16:37.747",
  "references": [
    {
      "url": "https://github.com/MoonshotAI/kimi-code",
      "source": "reefs@jfrog.com"
    },
    {
      "url": "https://github.com/MoonshotAI/kimi-code/commit/31449728b72df94e22bcb2de350a1e7624895e30",
      "source": "reefs@jfrog.com"
    },
    {
      "url": "https://github.com/MoonshotAI/kimi-code/pull/1791",
      "source": "reefs@jfrog.com"
    },
    {
      "url": "https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%400.27.0",
      "source": "reefs@jfrog.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "reefs@jfrog.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode."
    }
  ],
  "lastModified": "2026-07-27T20:37:16.927",
  "sourceIdentifier": "reefs@jfrog.com"
}