Cross Site Scripting Vulnerability in Moonshot AI Kimi Product
CVE-2026-79294

6.1MEDIUM

Key Information:

Vendor: Moonshot AI
Status: Kimi
Vendor: CVE Published:; 18 September 2026

🔔 Create Moonshot AI Vulnerability Alert

What is CVE-2026-79294?

A Cross Site Scripting vulnerability exists in the Moonshot AI Kimi product that allows remote attackers to execute arbitrary code. This vulnerability is triggered through the HTML artifact Preview rendering within the public Share view component, leading to potential unauthorized access or manipulation of user interactions. Users are encouraged to apply security patches and update their software to mitigate the risks associated with this vulnerability.

References

http://kimi.com

http://moonshot.com

https://kimi.com/share/

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 18, 2026
Vulnerability Reserved
Aug 25, 2026

CVE-2026-79294 Data

JSON