CVE-2026-30302

The CodeRider-Kilo command auto-approval module is vulnerable to OS Command Injection , which can lead to Remote Code Execution (RCE) . The root cause is the use of an incompatible Unix-based shell-quote library to analyze commands on the Windows platform, combined with a failure to correctly han...