CVE-2026-17534 is an SSRF vulnerability in MoonshotAI Kimi Code before version 0.27.0. The vulnerability is due to insufficient SSRF protections in the FetchURL function, which relies on a static denylist of hostnames and IP literals without resolving DNS or re-checking hosts after HTTP redirects. This allows an attacker who can influence FetchURL calls (e.g., via prompt injection) to provide a public hostname that resolves to internal or loopback addresses or a public URL that redirects to such targets, thereby enabling access to internal network services that the denylist was intended to block. The FetchURL call is auto-approved by default, increasing the risk of exploitation without user interaction.

Successful exploitation allows an attacker to bypass SSRF protections and access internal network services that should be blocked, potentially leading to unauthorized information disclosure or interaction with internal systems. The vulnerability does not impact integrity or availability directly but compromises confidentiality by enabling internal network access through SSRF.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid using vulnerable versions of Kimi Code or disable the FetchURL function if possible. Additional mitigations include restricting network access from the application to internal services and monitoring for unusual FetchURL usage. Since no official fix or patch link is provided, closely monitor MoonshotAI advisories for updates.