{"data":{"id":"425222de-64ed-4de1-9f67-408298cc2614","title":"CVE-2026-95660: A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function…","summary":"CVE-2026-95660 is a flaw in Moonshot AI Kimi Code up to 0.31.0, in an unknown function of agent-core-v2/src/agent/mcp/config-loader.ts within the MCP Configuration Loader component. Manipulating it results in OS command injection, and the attack may be launched remotely. The exploit has been released publicly and may be used for attacks.","solution":"Upgrade to version 0.31.1. The fix also resolves fd and stty binaries to absolute paths so untrusted workspaces cannot plant bare-name executables before confirmation, addressing a secondary $PATH path-planting vector alongside the primary untrusted-.mcp.json auto-spawn.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-95660","publishedAt":"2026-09-22T18:17:37.750Z","cveId":"CVE-2026-95660","cweIds":["CWE-77","CWE-78"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Moonshot AI Kimi Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Moonshot AI Kimi Code OS command injection in MCP configuration loader","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.01665,"epssCheckedAt":"2026-11-10T06:09:43.601Z","kevDateAdded":null,"advisoryAliases":["GHSA-jp7p-97jq-v89h"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:37.863Z","patchAvailable":null,"disclosureDate":"2026-09-22T18:17:37.750Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}