Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Moonshotai
Kimi-agent-sdk
Moonshotai Kimi-agent-sdk vulnerabilities
moonshotai
kimi-agent-sdk
[Kimi VS Code] Command Injection in publish scripts vsix-publish.js and ovsx-publish.js
CVE-2026-25046
2.9
Low
January 29, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open