Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to execSync() as shell command strings. Prior to version 0.1.6, filenames containing shell metacharacters like $(cmd) could execute arbitrary commands. Note: This vulnerability exists only in the repository's development scripts. The published VSCode extension does not include these files and end users are not affected. This is fixed in version 0.1.6 by replacing execSync with execFileSync using array arguments. As a workaround, ensure .vsix files in the project directory have safe filenames before running publish scripts.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-01-29 | 1 | General1 |
| 2026-01-30 | 1 | Disclosure1 |
| 2026-03-03 | 1 | General1 |
guard-scanner v5.0.6 🛡️ + CVE-2026-2256 (MS-Agent check_safe bypass) + CVE-2026-25046 (Kimi execSync injection) 150 patterns / 139 tests / 0.016ms http://github.com/koatora20/guard-scanner #AIAgentSecurity #CVE
Post summary
The post lists two CVEs with brief descriptors and links to a scanner tool, but provides no exploit, patch, or active exploitation details.
CVE-2026-25046 Command Injection Vulnerability in Kimi Agent SDK Development Scripts Before 0.1.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25046
Post summary
A command injection vulnerability (CVE-2026-25046) in Kimi Agent SDK Development Scripts versions prior to 0.1.6 is disclosed, but no PoC, exploit code, patch, or exploitation evidence is provided.
CVE-2026-25046 Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filename… https://www.cve.org/CVERecord?id=CVE-2026-25046
Post summary
The text briefly references CVE-2026-25046 and a set of scripts involved, offering no further details about exploitation, patches, or technical nature.