4 matches found
CVE-2026-79294
CVE-2026-79294 CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. Vulnerability Details Vulnerability Type: Stored/Stored-like...
CVE-2026-79294
Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component...
CVE-2026-79294
CVE-2026-79294 is a stored XSS in the HTML artifact Preview rendering of Moonshot AI Kimi (version as of 2026-07-18), reachable through the public Share view component. A remote, unauthenticated attacker can deliver a crafted HTML artifact that executes arbitrary code in a victim's browser, leadi...
