Description (CNA)
Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MoonshotAI / Kimi Code | affected 0 before 0.27.0 |
CWE
CWE-918
References
- https://github.com/MoonshotAI/kimi-code/commit/31449728b72df94e22bcb2de350a1e7624895e30
- https://github.com/MoonshotAI/kimi-code/pull/1791
- https://github.com/MoonshotAI/kimi-code/releases/tag/%40moonshot-ai%2Fkimi-code%400.27.0
- https://github.com/MoonshotAI/kimi-code
ADP enrichment
No English description supplied.
No references supplied.