Description
An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint
High · 8.4
CVE-2026-79403
EUVD-2026-89423GHSA-vmfg-8hhv-69wh
An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint
Published Sep 29, 2026 · Updated Sep 30, 2026 · Assigned by mitre