PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-8765 Kilo-Org CVE debrief

A path traversal vulnerability exists in Kilo-Org kilocode versions up to and including 7.0.47. The vulnerability resides in the `Bun.file` function within `packages/opencode/src/kilocode/review/worktree-diff.ts`, specifically affecting the File Diff API Endpoint. An attacker can manipulate the `File` argument to achieve path traversal, potentially allowing unauthorized file access. The attack vector is network-based with low attack complexity and requires low privileges. The CVSS 4.0 score of 2.1 reflects limited confidentiality impact with no integrity or availability impact. The exploit has been publicly disclosed and is available, though the vendor was unresponsive to early disclosure attempts. The weakness is categorized as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory).

Vendor
Kilo-Org
Product
kilocode
CVSS
LOW 2.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-17
Original CVE updated
2026-05-19
Advisory published
2026-05-17
Advisory updated
2026-05-19

Who should care

Organizations using Kilo Code extension versions 7.0.0-7.0.47 in Visual Studio Code; security teams monitoring for path traversal vulnerabilities in Bun-based applications; developers maintaining file diff functionality in code review tools

Technical summary

The vulnerability exists in the `Bun.file` function call within `packages/opencode/src/kilocode/review/worktree-diff.ts`. Insufficient validation of the `File` argument allows path traversal sequences to be processed, enabling attackers with low privileges to access files outside the intended directory. The attack is remotely exploitable with low complexity. No integrity or availability impact is indicated per CVSS 4.0 scoring.

Defensive priority

low

Recommended defensive actions

  • Upgrade Kilo Code to a version newer than 7.0.47 when available
  • Restrict network access to the File Diff API Endpoint to authorized users only
  • Implement input validation and sanitization for file path arguments in the worktree-diff.ts component
  • Monitor for anomalous file access patterns in the application logs
  • Consider deploying Web Application Firewall (WAF) rules to detect and block path traversal attempts

Evidence notes

Vulnerability confirmed in Kilo Code versions 7.0.0 through 7.0.47 per NVD CPE criteria. The affected component is the File Diff API Endpoint using Bun.file function. CVSS 4.0 vector indicates network attack vector, low complexity, low privileges required, with proof-of-concept exploit available.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-8765 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-8765

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-8765 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8765

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.