SSRF in Moonshotai Kimi Code
CVE-2026-17534
Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.001 (2.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N.
Affected products
- Moonshotai Kimi Code — versions 0
Weakness classification (CWE)
References
- reefs@jfrog.com (product)
- reefs@jfrog.com (patch)
- reefs@jfrog.com (patch)
- reefs@jfrog.com (vendor-advisory)
Frequently asked questions
- What is CVE-2026-17534?
- CVE-2026-17534 is a medium-severity vulnerability in Moonshotai Kimi Code, classified under Server-Side Request Forgery (SSRF). CVSS score: 5.5/10. Published 2026-07-27.
- How severe is CVE-2026-17534?
- Medium severity. CVSS v3 base score is 5.5 out of 10.