{"id":"CVE-2026-8766","sourceIdentifier":"cna@vuldb.com","published":"2026-05-17T23:17:02.640","lastModified":"2026-10-14T20:10:00.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"es","value":"Se ha encontrado un fallo en el kilocódigo de Kilo-Org hasta la versión 7.0.47. Este problema afecta a la función Load del archivo packages/opencode/src/config/config.ts del componente Gestor de Variables de Entorno. La ejecución de una manipulación del argumento KILO_CONFIG_CONTENT puede llevar a la revelación de información. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contactó al proveedor con antelación sobre esta revelación, pero no respondió de ninguna manera."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"Kilo-Org","product":"kilocode","cpes":["cpe:2.3:a:kilo-org:kilocode:*:*:*:*:*:*:*:*"],"modules":["Environment Variable Handler"],"versions":[{"version":"7.0.0","status":"affected"},{"version":"7.0.1","status":"affected"},{"version":"7.0.2","status":"affected"},{"version":"7.0.3","status":"affected"},{"version":"7.0.4","status":"affected"},{"version":"7.0.5","status":"affected"},{"version":"7.0.6","status":"affected"},{"version":"7.0.7","status":"affected"},{"version":"7.0.8","status":"affected"},{"version":"7.0.9","status":"affected"},{"version":"7.0.10","status":"affected"},{"version":"7.0.11","status":"affected"},{"version":"7.0.12","status":"affected"},{"version":"7.0.13","status":"affected"},{"version":"7.0.14","status":"affected"},{"version":"7.0.15","status":"affected"},{"version":"7.0.16","status":"affected"},{"version":"7.0.17","status":"affected"},{"version":"7.0.18","status":"affected"},{"version":"7.0.19","status":"affected"},{"version":"7.0.20","status":"affected"},{"version":"7.0.21","status":"affected"},{"version":"7.0.22","status":"affected"},{"version":"7.0.23","status":"affected"},{"version":"7.0.24","status":"affected"},{"version":"7.0.25","status":"affected"},{"version":"7.0.26","status":"affected"},{"version":"7.0.27","status":"affected"},{"version":"7.0.28","status":"affected"},{"version":"7.0.29","status":"affected"},{"version":"7.0.30","status":"affected"},{"version":"7.0.31","status":"affected"},{"version":"7.0.32","status":"affected"},{"version":"7.0.33","status":"affected"},{"version":"7.0.34","status":"affected"},{"version":"7.0.35","status":"affected"},{"version":"7.0.36","status":"affected"},{"version":"7.0.37","status":"affected"},{"version":"7.0.38","status":"affected"},{"version":"7.0.39","status":"affected"},{"version":"7.0.40","status":"affected"},{"version":"7.0.41","status":"affected"},{"version":"7.0.42","status":"affected"},{"version":"7.0.43","status":"affected"},{"version":"7.0.44","status":"affected"},{"version":"7.0.45","status":"affected"},{"version":"7.0.46","status":"affected"},{"version":"7.0.47","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-18T14:54:24.339328Z","id":"CVE-2026-8766","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kilo:kilo_code_cli:*:*:*:*:*:node.js:*:*","versionEndIncluding":"7.0.47","matchCriteriaId":"7FA8CC8A-DFED-48D2-9553-E1A7295A8767"}]}]}],"references":[{"url":"https://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f","source":"cna@vuldb.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://vuldb.com/submit/811400","source":"cna@vuldb.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/vuln/364391","source":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/vuln/364391/cti","source":"cna@vuldb.com","tags":["Permissions Required","VDB Entry"]}]}