Moonshotai

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 4
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-95660

    Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection

    Last Modified: Sep 22, 2026
    Published: Sep 22, 2026

    CVE-2026-79294

    Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component

    Last Modified: Sep 19, 2026
    Published: Sep 18, 2026

    CVE-2026-17534

    Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects

    Last Modified: Jul 27, 2026
    Published: Jul 27, 2026

    CVE-2026-25046

    [Kimi VS Code] Command Injection in publish scripts vsix-publish.js and ovsx-publish.js

    Last Modified: Apr 18, 2026
    Published: Jan 29, 2026
    Items Per Page
    Moonshotai Vulnerabilities & Security CVEs | CVE-DB