CVE-2026-95660

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-95660
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95660.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-95660
Published
2026-09-22T18:00:11Z
Modified
2026-09-24T03:46:49Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection
Details

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.31.1 is sufficient to fix this issue. It is recommended to upgrade the affected component. Beyond the trust prompt, the fix resolves fd/stty binaries to absolute paths specifically "so untrusted workspaces cannot plant bare-name executables before confirmation," fixing a secondary $PATH path-planting vector alongside the primary untrusted-.mcp.json auto-spawn.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-77",
        "CWE-78"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95660.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "0.1"
                },
                {
                    "last_affected":  "0.1"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/moonshotai/kimi-code

Affected ranges

Type
GIT
Repo
https://github.com/moonshotai/kimi-code
Events
Introduced
d496fd40b649ddec1226b8f44cf1556c51178aff
Last Affected
bc28e9d802fbec29395a7aed85e880679a050145
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0.2"
        },
        {
            "last_affected":  "0.2"
        },
        {
            "introduced":  "0.3"
        },
        {
            "last_affected":  "0.3"
        },
        {
            "introduced":  "0.4"
        },
        {
            "last_affected":  "0.4"
        },
        {
            "introduced":  "0.5"
        },
        {
            "last_affected":  "0.5"
        },
        {
            "introduced":  "0.6"
        },
        {
            "last_affected":  "0.6"
        },
        {
            "introduced":  "0.7"
        },
        {
            "last_affected":  "0.7"
        },
        {
            "introduced":  "0.8"
        },
        {
            "last_affected":  "0.8"
        },
        {
            "introduced":  "0.9"
        },
        {
            "last_affected":  "0.9"
        },
        {
            "introduced":  "0.10"
        },
        {
            "last_affected":  "0.10"
        },
        {
            "introduced":  "0.11"
        },
        {
            "last_affected":  "0.11"
        },
        {
            "introduced":  "0.12"
        },
        {
            "last_affected":  "0.12"
        },
        {
            "introduced":  "0.13"
        },
        {
            "last_affected":  "0.13"
        },
        {
            "introduced":  "0.14"
        },
        {
            "last_affected":  "0.14"
        },
        {
            "introduced":  "0.15"
        },
        {
            "last_affected":  "0.15"
        },
        {
            "introduced":  "0.16"
        },
        {
            "last_affected":  "0.16"
        },
        {
            "introduced":  "0.17"
        },
        {
            "last_affected":  "0.17"
        },
        {
            "introduced":  "0.18"
        },
        {
            "last_affected":  "0.18"
        },
        {
            "introduced":  "0.19"
        },
        {
            "last_affected":  "0.19"
        },
        {
            "introduced":  "0.20"
        },
        {
            "last_affected":  "0.20"
        },
        {
            "introduced":  "0.21"
        },
        {
            "last_affected":  "0.21"
        },
        {
            "introduced":  "0.22"
        },
        {
            "last_affected":  "0.22"
        },
        {
            "introduced":  "0.23"
        },
        {
            "last_affected":  "0.23"
        },
        {
            "introduced":  "0.24"
        },
        {
            "last_affected":  "0.24"
        },
        {
            "introduced":  "0.25"
        },
        {
            "last_affected":  "0.25"
        },
        {
            "introduced":  "0.26"
        },
        {
            "last_affected":  "0.26"
        },
        {
            "introduced":  "0.27"
        },
        {
            "last_affected":  "0.27"
        },
        {
            "introduced":  "0.28"
        },
        {
            "last_affected":  "0.28"
        },
        {
            "introduced":  "0.29"
        },
        {
            "last_affected":  "0.29"
        },
        {
            "introduced":  "0.30"
        },
        {
            "last_affected":  "0.30"
        },
        {
            "introduced":  "0.31.0"
        },
        {
            "last_affected":  "0.31.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

0.*
0.10
0.11
0.12
0.13
0.14
0.15
0.16
0.17
0.18
0.19
0.2
0.20
0.21
0.22
0.23
0.24
0.25
0.26
0.27
0.28
0.29
0.3
0.30
0.31.0
0.4
0.5
0.6
0.7
0.8
0.9
@moonshot-ai/kimi-code@0.*
@moonshot-ai/kimi-code@0.10.0
@moonshot-ai/kimi-code@0.10.1
@moonshot-ai/kimi-code@0.11.0
@moonshot-ai/kimi-code@0.12.0
@moonshot-ai/kimi-code@0.12.1
@moonshot-ai/kimi-code@0.13.0
@moonshot-ai/kimi-code@0.13.1
@moonshot-ai/kimi-code@0.14.0
@moonshot-ai/kimi-code@0.14.1
@moonshot-ai/kimi-code@0.14.2
@moonshot-ai/kimi-code@0.14.3
@moonshot-ai/kimi-code@0.15.0
@moonshot-ai/kimi-code@0.16.0
@moonshot-ai/kimi-code@0.17.0
@moonshot-ai/kimi-code@0.17.1
@moonshot-ai/kimi-code@0.18.0
@moonshot-ai/kimi-code@0.19.0
@moonshot-ai/kimi-code@0.19.1
@moonshot-ai/kimi-code@0.19.2
@moonshot-ai/kimi-code@0.2.0
@moonshot-ai/kimi-code@0.20.0
@moonshot-ai/kimi-code@0.20.1
@moonshot-ai/kimi-code@0.20.2
@moonshot-ai/kimi-code@0.20.3
@moonshot-ai/kimi-code@0.21.0
@moonshot-ai/kimi-code@0.21.1
@moonshot-ai/kimi-code@0.22.0
@moonshot-ai/kimi-code@0.22.1
@moonshot-ai/kimi-code@0.22.2
@moonshot-ai/kimi-code@0.22.3
@moonshot-ai/kimi-code@0.23.0
@moonshot-ai/kimi-code@0.23.1
@moonshot-ai/kimi-code@0.23.2
@moonshot-ai/kimi-code@0.23.3
@moonshot-ai/kimi-code@0.23.4
@moonshot-ai/kimi-code@0.23.5
@moonshot-ai/kimi-code@0.23.6
@moonshot-ai/kimi-code@0.24.0
@moonshot-ai/kimi-code@0.24.1
@moonshot-ai/kimi-code@0.24.2
@moonshot-ai/kimi-code@0.25.0
@moonshot-ai/kimi-code@0.26.0
@moonshot-ai/kimi-code@0.27.0
@moonshot-ai/kimi-code@0.28.0
@moonshot-ai/kimi-code@0.28.1
@moonshot-ai/kimi-code@0.29.0
@moonshot-ai/kimi-code@0.29.1
@moonshot-ai/kimi-code@0.29.2
@moonshot-ai/kimi-code@0.3.0
@moonshot-ai/kimi-code@0.30.0
@moonshot-ai/kimi-code@0.31.0
@moonshot-ai/kimi-code@0.4.0
@moonshot-ai/kimi-code@0.5.0
@moonshot-ai/kimi-code@0.6.0
@moonshot-ai/kimi-code@0.7.0
@moonshot-ai/kimi-code@0.8.0
@moonshot-ai/kimi-code@0.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95660.json"