CVE-2026-79403

HighCVSS 8.4

Published: 29/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint.

A local attacker can execute arbitrary code in the application context, leading to full system compromise.

Update Kilo Code to version 7.4.1 or later.

Original NVD description (English source)

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint

Vulnerability data from NVD (NIST) · CISA KEV · EPSS