MEDIUMCVSS v3.1 4.4Vulnerability
CVE-2026-126758
A vulnerability was detected in Moonshot AI Kimi Code up to 2.0.2. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional_dir results in reliance on untrusted inputs in a security decision. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.1.0 is able to resolve this issue. Upgrading the affected component is recommended.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss score
- 4.4
- Cvss severity
- MEDIUM
- Retrieved at
- 2026-11-11T23:50:19+00:00
- Score
- 4.4
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-126758
- Cvss vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
- First seen by Signal
- 2026-11-11T23:46:42+00:00
- Name
- CVE-2026-126758
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
- Published at
- 2026-11-11T23:17:11.320
- Last modified
- 2026-11-11T23:17:11.500
Related Entities (2)
HAS_WEAKNESS (2)
Related research
Explore deeper with Ninja Signal's threat intelligence graph