CVE-2026-126758 | Moonshot AI Kimi Code up to 2.0.2 WorkspaceDirsService .kimi-code/local.toml additional_dir reliance on untrusted inputs in a security decision

A vulnerability was found in Moonshot AI Kimi Code up to 2.0.2. It has been classified as problematic. This vulnerability affects unknown code of the file .kimi-code/local.toml of the component WorkspaceDirsService. Performing a manipulation of the argument additional_dir results in reliance on untrusted inputs in a security decision.

This vulnerability is reported as CVE-2026-126758. The attack requires a local approach. Moreover, an exploit is present.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More