CyberRota Analysis
AI-GeneratedThe Kimi Code library prior to version 0.27.0 is vulnerable to Server-Side Request Forgery (SSRF) due to inadequate DNS resolution and host re-validation after HTTP redirects in its FetchURL function. This flaw allows attackers to manipulate FetchURL calls, potentially accessing internal network services by redirecting to loopback or other internal addresses, bypassing the intended denylist protections. Organizations using Kimi Code, especially those employing the auto-approve tool set, should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call (for example via prompt injection) can supply a crafted public hostname that resolves to loopback or another internal address, or a public URL that redirects to such a target, and thereby reach internal network services that the denylist was intended to block. FetchURL is included in the default auto-approve tool set, so the call does not require interactive user confirmation in manual mode.