Skip to content
OpenAdvisories

Product · Moonshot AI

Kimi Code

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-95660

    Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection

    A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command i…

    Moonshot AI Kimi Code