Server-Side Request Forgery in Kimi Code by Moonshot AI

CVE-2026-17534

What is CVE-2026-17534?

The Kimi Code application prior to version 0.27.0 contains a vulnerability in its FetchURL functionality, which employs a static denylist for preventing requests to certain hostnames and IP addresses. However, this implementation does not resolve DNS or re-validate hosts after HTTP redirects. This oversight allows an attacker to craft a FetchURL call that targets internal network services, evading the intended restrictions by redirecting to loopback or internal addresses. Notably, the FetchURL feature is part of the default auto-approve toolbox, allowing these calls to execute without manual user confirmation.

References