CVE-2026-25046

Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to execSync() as shell command strings. Prior to version 0.1.6, filenames containing shell metacharacters like $(cmd) could execute arbitrary commands. Note: This vulnerability exists only in the repository's development scripts. The published VSCode extension does not include these files and end users are not affected. This is fixed in version 0.1.6 by replacing execSync with execFileSync using array arguments. As a workaround, ensure .vsix files in the project directory have safe filenames before running publish scripts.

• CWE-77

• https://github.com/MoonshotAI/kimi-agent-sdk/security/advisories/GHSA-mv58-gxx5-8hj3

Published

Jan 29, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2504The Dealia – Request a quote plugin for WordPress is vulnera…4.3
• CVE-2026-25040Budibase is a low code platform for creating internal tools,…8.8
• CVE-2026-25041Budibase is a low code platform for creating internal tools,…7.2
• CVE-2026-25043Budibase is an open-source low-code platform. Prior to versi…7.5
• CVE-2026-25044Budibase is an open-source low-code platform. Prior to versi…8.8
• CVE-2026-25045Budibase is a low code platform for creating internal tools,…8.8
• CVE-2026-25047deepHas provides a test for the existence of a nested object…8.8
• CVE-2026-25048xgrammar is an open-source library for efficient, flexible, …7.5
• CVE-2026-25049n8n is an open source workflow automation platform. Prior to…9.9
• CVE-2026-2505The Categories Images plugin for WordPress is vulnerable to …5.4
• CVE-2026-25050Vendure is an open-source headless commerce platform. Prior …5.3
• CVE-2026-25051n8n is an open source workflow automation platform. Prior to…5.4