https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:18:20.055630+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341147 EUVD-2026-341147 2026-10-06T12:18:20.107006+00:00 EUVD-2026-341147 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17534 fkie_cve-2026-17534 2026-10-06T12:18:20.107060+00:00

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.

 https://cve.radiocsirt.org/vuln/ghsa-28vq-345c-25gg GHSA-28vq-345c-25gg 2026-10-06T12:18:20.107116+00:00

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.