EUVD-2026-89423

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint...

CVE-2026-79403

An issue in Kilo Code before version v7.4.1 allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the permission/allow-everything endpoint. No specific exploit details or direct remediation steps are provided in the documents beyond the mention of the a...