Command Injection Vulnerability in Kimi Agent SDK by MoonshotAI
CVE-2026-25046

2.9LOW

Key Information:

Vendor

Moonshotai

Status
Kimi-agent-sdk
Vendor
CVE Published:
29 January 2026

What is CVE-2026-25046?

The Kimi Agent SDK, a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime, is susceptible to command injection through its development scripts, namely vsix-publish.js and ovsx-publish.js. These scripts improperly pass filenames containing shell metacharacters, such as $(cmd), to the execSync() function, allowing the execution of arbitrary commands. This issue is specifically found in the development environment before version 0.1.6. Users are advised to replace execSync with execFileSync utilizing array arguments in version 0.1.6 to mitigate this vulnerability. To prevent potential exploitation, it's recommended to ensure that .vsix files contain safe filenames prior to executing any publish scripts.

Affected Version(s)

kimi-agent-sdk < 0.1.6

References

https://github.com/MoonshotAI/kimi-agent-sdk/security/adv...
x_refsource_CONFIRM

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.