← Back

Kilo

kilo

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Kilo Code
kilo_code
2 CVEs
Kilo Code Cli
kilo_code_cli
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-8766
1Kilo
2Kilo Code
Kilo Code Cli
Jun 17, 2026
May 17, 2026
2.1 LOW· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of...Show more
A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2026-8765
1Kilo
1Kilo Code
Jun 17, 2026
May 17, 2026
2.1 LOW· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts of the component File Diff API Endpoint....Show more
A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts of the component File Diff API Endpoint. Performing a manipulation of the argument File results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Show less