PatchSiren cyber security CVE debrief
CVE-2026-17534 MoonshotAI CVE debrief
CVE-2026-17534 is a vulnerability in Kimi Code (@moonshot-ai/kimi-code) before version 0.27.0, related to the FetchURL SSRF hardening implementation. The vulnerability uses a static hostname and IP-literal denylist in assertSafeFetchTarget without resolving DNS or re-validating hosts after HTTP redirects. This allows an attacker who can influence a FetchURL call to supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, potentially reaching internal network services that the denylist was intended to block.
- Vendor
- MoonshotAI
- Product
- Kimi Code
- CVSS
- MEDIUM 5.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-27
- Original CVE updated
- 2026-07-27
- Advisory published
- 2026-07-27
- Advisory updated
- 2026-07-27
Who should care
Users of Kimi Code (@moonshot-ai/kimi-code) before version 0.27.0 should be aware of this vulnerability and take necessary actions to mitigate it. Affected operators, platform administrators, vulnerability management teams, and security teams should review the vulnerability details and plan for updates or mitigations.
Technical summary
The FetchURL SSRF hardening in Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 is implemented as a static hostname and IP-literal denylist in assertSafeFetchTarget. However, this implementation does not resolve DNS or re-validate hosts after HTTP redirects. An attacker who can influence a FetchURL call, for example via prompt injection, can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target. This allows the attacker to reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.
Defensive priority
Medium priority should be given to updating Kimi Code (@moonshot-ai/kimi-code) to version 0.27.0 or later.
Recommended defensive actions
- Update Kimi Code (@moonshot-ai/kimi-code) to version 0.27.0 or later
- Review and restrict FetchURL calls to trusted sources
- Implement additional security measures to detect and prevent SSRF attacks
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
Evidence notes
The CVE record was published on 2026-07-27T10:16:37.747Z and has not been modified since. The NVD entry is currently 5.5 (MEDIUM). The vulnerability is related to the FetchURL SSRF hardening implementation in Kimi Code (@moonshot-ai/kimi-code) before version 0.27.0. Evidence limits suggest that additional verification may be required to confirm affected scope and severity.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-27T10:16:37.747Z and has not been modified since.