Kimi K3: Chinesische KI findet mehrere Zero-Day-Lücken in redis-Datenbank
Teaser from the source
Ein IT-Forscher hat mit der chinesischen KI Kimi K3 mehrere Zero-Day-Lücken in der redis-Datenbank entdeckt. Updates bestätigen die Funde.
This is the RSS-feed teaser. Read the full article at the original source.
Read at heise SecurityMore on Kimi
Other advisories
- Not ratedosv:CVE-2026-95660Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection
- MediumCVE-2026-95660In Moonshot AI Kimi Code bis Version 0.
- MediumCVE-2026-95660Moonshot AI Kimi Code: Betriebssystem-Befehlsinjektion
- Not ratedosv:openSUSE-SU-2026:21849-1Security update for kimi-code
- Not ratedosv:openSUSE-SU-2026:11705-1kimi-code-0.41.0-1.1 on GA media
- Not ratedosv:CVE-2026-17534Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects
- MediumCVE-2026-17534MoonshotAI Kimi Code: Server-Side-Request-Forgery (SSRF)
- MediumCVE-2026-17534Kimi Code (@moonshot-ai/kimi-code) vor Version 0.
Other news entries
- New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueNewsThe Hacker News
- Moonshot’s Kimi AI model has also escaped from a test environmentNewsCSO Online
- Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers SayNewsThe Hacker News
- Nach KI-Hacks: Chinesisches KI-Modell trickst Forscher bei Tests ausNewsGolem.de — Security
ID