PT-2026-64873 · Moonshot Ai · Kimi Code

Natan Nehorai · CVE-2026-17534 · Published 2026-07-27 · Updated 2026-07-27

NVD

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-17534

Affected Products

Kimi Code

References · 5

• https://github.com/MoonshotAI/kimi-code/commit/31449728b72df94e22bcb2de350a1e7624895e30 · Patch
• https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%400.27.0 · Vendor Advisory
• https://github.com/MoonshotAI/kimi-code/pull/1791 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-17534 · Security Note
• https://github.com/MoonshotAI/kimi-code · Note