CVE-2026-25046 Details
Description
Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to execSync() as shell command strings. Prior to version 0.1.6, filenames containing shell metacharacters like $(cmd) could execute arbitrary commands. Note: This vulnerability exists only in the repository's development scripts. The published VSCode extension does not include these files and end users are not affected. This is fixed in version 0.1.6 by replacing execSync with execFileSync using array arguments. As a workaround, ensure .vsix files in the project directory have safe filenames before running publish scripts.
A command injection vulnerability has been identified in the Kimi Agent SDK, specifically in the vsix-publish.js and ovsx-publish.js scripts. These scripts pass filenames to the execSync() function as shell command strings. Prior to version 0.1.6, filenames containing shell metacharacters, such as $(cmd), could be exploited to execute arbitrary commands. It is important to note that this vulnerability exists only in the development scripts of the repository. The published VSCode extension does not include these files, and therefore end users are not affected.
Users can upgrade to Kimi Agent SDK version 0.1.6 or later, where this vulnerability has been fixed by replacing execSync with execFileSync, using array arguments. As an alternative, ensure that .vsix files in the project directory have safe filenames before executing the publish scripts.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jan 29, 2026CISA-ADP
Assessed Jan 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MoonshotAI/kimi-agent-sdk/security/advisories/GHSA-mv58-gxx5-8hj3 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MoonshotAI Kimi Agent SDK | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 29, 2026 | New CVE Received | [email protected] |