TI-2026-14384 Aliases CVE-2026-17534 GHSA-28vq-345c-25gg

Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects

LOW 24CWE-918Published 2026-07-27 · Updated 2026-07-27

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: High
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00158 5th percentileScored 2026-11-07

Fix Fixed Kimi Code (MoonshotAI): 0.27.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
MoonshotAI	Kimi Code	before 0.27.0	0.27.0	Patch available	CNA

Kimi Code VendorMoonshotAI Affected before 0.27.0 Fixed in 0.27.0 Patch available CNA

Remediation

Fix · CNA Kimi Code (MoonshotAI) Fixed in 0.27.0

Timeline

2026-10-02 Threatist record created from CVE-2026-17534
2026-10-03 Alias added: GHSA-28vq-345c-25gg

References

Patch 2

Advisory 1

Kimi Code 0.27.0 release

Other 1

Kimi Code repository

TI-2026-63668 Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection CVSS 4.0MEDIUM 5.3
TI-2026-20230 [Kimi VS Code] Command Injection in publish scripts vsix-publish.js and ovsx-publish.js CVSS 3.1LOW 2.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences