What’s Vulnerable › Vulnerabilities

CVE-2026-17534: Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-27 · updated 2026-10-24
• Weakness: CWE-918

Description

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.

Affected products

• MoonshotAI Kimi Code: before 0.27.0 — fixed in 0.27.0

How to fix

Upgrade to a fixed version: MoonshotAI Kimi Code 0.27.0. Check the vendor advisory for mitigations.

References

• https://github.com/MoonshotAI/kimi-code
• https://github.com/MoonshotAI/kimi-code/commit/31449728b72df94e22bcb2de350a1e7624895e30
• https://github.com/MoonshotAI/kimi-code/pull/1791
• https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%400.27.0

Get alerted when CVE-2026-17534 or the next vulnerability affects your stack