Skip to content
OpenAdvisories

Vendor

Kilo-Org

2 known vulnerabilities.

Products

kilocode 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8766

    Kilo-Org kilocode Environment Variable config.ts load information disclosure

    A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can le…

    Kilo-Org kilocode @kilocode/cli npm
  • Medium 4.3
    CVE-2026-8765

    Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal

    A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts of the component File Diff API Endpoint. Performing a manipulation of the argum…

    Kilo-Org kilocode