CVE-2026-8765

creationtimestamp| type| source ---|---|--- 2026-05-18 02:32:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3tkbhxqc2q...

CVE-2026-8765 Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal

A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts of the component File Diff API Endpoint. Performing a manipulation of the argument File results in path traversal. It...