CVE WatchJul 27, 2026

CVE-2026-17534

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSa

CVSS

5.5

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Jul 27, 2026 · Last modified: Jul 27, 2026 · CWE-918

EPSS · 30d

Not enough EPSS history yet.

Technical description

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-171928.5 HIG

—

———A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal services that are not otherwise accessible. This vulnerability requires a minimum role of Enterprise Standard Admin. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.5h CVE-2026-664374.9 MED

—

———Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions.4h CVE-2026-655585.4 MED

—

———Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.4h CVE-2026-595527.2 HIG

—

———Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions.4h CVE-2025-156628.6 HIG

—

——0The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does not enforce a valid authorization check, allowing unauthenticated attackers to read arbitrary local files (including configuration files containing database credentials and secret keys) and to make server-side requests to internal resources.6h CVE-2026-174586.3 MED

—

——0A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.7h