CVE-2026-17534
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
26/100
Published: 2026-07-27
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
No Auth
Conf. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
None
UI:
Required
S:
Changed
C:
High
I:
None
A:
None
Description
Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.