CVE-2026-39107

CVE-2026-39107: Cross-Site Scripting XSS in Kimi AI v1.0 Description A Cross-Site Scripting XSS vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches...