CVE-2026-95660: OS Command Injection in Moonshot AI Kimi Code

A security flaw in Moonshot AI Kimi Code up to version 0.31.0 allows OS command injection through the MCP Configuration Loader component. The vulnerability enables remote attacks by planting untrusted executables in the $PATH when loading .mcp.json files.

Disclosed 22 September 2026 · Record updated 1 October 2026

Impact

Remote OS command injection vulnerability affecting Kimi Code users running untrusted workspaces or loading untrusted .mcp.json configuration files

Our coverage

A puppet master's strings tangle through a wooden agent's joints, allowing hidden hands to puppet its limbs and operate machinery behind the developer's back.

Vulnerabilities

Command injection flaw fixed in Moonshot AI's Kimi Code agent

CVE-2026-95660 let a malicious project directory run commands on a developer's machine through the coding agent's MCP configuration loader.

22 Sept 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-95660