CVE-2026-17534: Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal

Kimi Code versions before 0.27.0 have a security weakness in how it blocks unsafe network requests. The protection uses a static list (denylist) of forbidden hostnames and IP addresses, but it doesn't check if domain names resolve to internal addresses or follow redirects (automatic forwards to different URLs), so an attacker could use prompt injection (tricking the AI by hiding instructions in its input) or craft clever URLs to access internal services that should be blocked. Since FetchURL (a tool for fetching web content) is enabled by default without requiring user approval, this vulnerability is particularly dangerous.