Threats tagged 'ghsa-75pq-p477-6h9c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-126758Moonshot AI Kimi Code · Improper Input Validation Medium4.82026-11-12GCVE DatabaseCVE-2026-126758 A vulnerability in Moonshot AI Kimi Code up to version 2.0.2 involves improper handling of the additional_dir argument in the WorkspaceDirsService component, leading to reliance on untrusted inputs in a security decision. This local attack can cause integrity and availability impacts. The issue is fixed in version 2.1.0. Exploit code is publicly available. Report on CVE-2026-126758 Vulnerability CWE-20 #ghsa-75pq-p477-6h9c	GCVE Database	2026-11-12

Page 1 of 1