CVE-2026-79403
- Source
- https://cve.org/CVERecord?id=CVE-2026-79403
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79403.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-79403
- Published
- 2026-09-29T00:00:00Z
- Modified
- 2026-10-21T02:59:58Z
- Severity
-
- 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint
- Database specific
{ "cna_assigner": "mitre", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79403.json" }- References
-
- https://gist.github.com/akinerkisa/e345af9f9992b87247a71fdb5b36ac2c
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79403.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-79403
- https://github.com/Kilo-Org/kilocode/commit/51e45d7fb7
- https://github.com/Kilo-Org/kilocode/pull/11887
Affected packages
Git / github.com/kilo-org/kilocode
Affected ranges
- Type
- GIT
- Repo
- https://github.com/kilo-org/kilocode
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "7.4.1" } ], "source": "DESCRIPTION" }, { "range": [ { "fixed": "51e45d7fb7" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
jetbrains/v7.*
jetbrains/v7.0.1-rc.1
jetbrains/v7.0.1-rc.10
jetbrains/v7.0.1-rc.11
jetbrains/v7.0.1-rc.12
jetbrains/v7.0.1-rc.13
jetbrains/v7.0.1-rc.14
jetbrains/v7.0.1-rc.2
jetbrains/v7.0.1-rc.3
jetbrains/v7.0.1-rc.4
jetbrains/v7.0.1-rc.5
jetbrains/v7.0.1-rc.6
jetbrains/v7.0.1-rc.7
jetbrains/v7.0.1-rc.8
jetbrains/v7.0.1-rc.9
v1.*
v1.0.13
v1.0.14
v1.0.17
v1.0.18
v1.0.19
v1.0.20
v1.0.21
v1.0.22
v1.0.23
v1.0.24
v1.0.25
v1.0.9
v7.*
v7.0.26
v7.0.27
v7.0.28
v7.0.29
v7.0.30
v7.0.31
v7.0.32
v7.0.33
v7.0.34
v7.0.35
v7.0.36
v7.0.37
v7.0.38
v7.0.39
v7.0.40
v7.0.41
v7.0.42
v7.0.43
v7.0.44
v7.0.45
v7.0.46
v7.0.47
v7.0.48
v7.0.49
v7.0.50
v7.0.51
v7.1.0
v7.1.1
v7.1.10
v7.1.11
v7.1.12
v7.1.13
v7.1.14
v7.1.15
v7.1.16
v7.1.17
v7.1.18
v7.1.19
v7.1.2
v7.1.20
v7.1.21
v7.1.22
v7.1.23
v7.1.3
v7.1.4
v7.1.5
v7.1.6
v7.1.7
v7.1.8
v7.1.9
v7.2.0
v7.2.1
v7.2.1-rc.202604092126
v7.2.10
v7.2.11
v7.2.12
v7.2.14
v7.2.17
v7.2.19
v7.2.20
v7.2.21
v7.2.22
v7.2.23
v7.2.24
v7.2.26
v7.2.3
v7.2.33
v7.2.34
v7.2.39
v7.2.4
v7.2.42
v7.2.48
v7.2.49
v7.2.5
v7.2.50
v7.2.52
v7.2.54
v7.2.6
v7.2.7
v7.2.8
v7.2.9
v7.3.0
v7.3.10
v7.3.11
v7.3.12
v7.3.14
v7.3.15
v7.3.16
v7.3.17
v7.3.20
v7.3.21
v7.3.22
v7.3.29
v7.3.3
v7.3.30
v7.3.31
v7.3.32
v7.3.33
v7.3.39
v7.3.4
v7.3.40
v7.3.42
v7.3.44
v7.3.49
v7.3.5
v7.3.50
v7.3.51
v7.3.53
v7.3.54
v7.3.6
v7.3.63
v7.3.7
v7.3.8
v7.3.9
v7.4.0