PT-2026-5361 · Microsoft+1 · Vscode+1

Hackerman70000 · Published 2026-01-29 · Updated 2026-03-03 · CVE-2026-25046

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kimi Agent SDK versions prior to 0.1.6

Description The Kimi Agent SDK libraries expose the Kimi Code agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to the execSync() function as shell command strings. Filenames containing shell metacharacters, such as $(cmd), could potentially execute arbitrary commands. This issue is present only in the repository’s development scripts and does not affect published VSCode extensions. The scripts utilize the execSync() function with filenames as arguments, which allows for command injection.

Recommendations Update to version 0.1.6 or later, which replaces execSync with execFileSync using array arguments. Ensure .vsix files in the project directory have safe filenames before running publish scripts.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-25046

GHSA-MV58-GXX5-8HJ3

Affected Products

Kimi-Agent-Sdk

Vscode

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25046.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-25046 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25046 · Vendor Advisory
• https://github.com/MoonshotAI/kimi-agent-sdk/security/advisories/GHSA-mv58-gxx5-8hj3 · Note
• https://twitter.com/CVEnew/status/2017000654309302761 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2017075612100215151 · Twitter Post
• https://twitter.com/guava_asi/status/2028968557875524026 · Twitter Post