CVE-2026-17534

Name of the Vulnerable Software and Affected Versions Kimi Code (@moonshot-ai/kimi-code) versions prior to 0.27.0

Description The software implements Server-Side Request Forgery (SSRF) hardening using a static hostname and IP-literal denylist within the assertSafeFetchTarget() function. However, it fails to resolve DNS or re-validate hosts following HTTP redirects. An attacker capable of influencing a FetchURL call, such as through prompt injection, can provide a crafted public hostname that resolves to a loopback or internal address, or a public URL that redirects to such a target. This allows access to internal network services that the denylist is intended to block. Because FetchURL is part of the default auto-approve tool set, these calls do not require interactive user confirmation in manual mode.

Recommendations Update Kimi Code (@moonshot-ai/kimi-code) to version 0.27.0 or later.