{"id":"EUVD-2026-30710","enisaUuid":"4781f209-2a9d-36d3-80aa-c54e3225009d","description":"A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","datePublished":"May 17, 2026, 10:15:08 PM","dateUpdated":"May 18, 2026, 5:51:42 PM","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://vuldb.com/vuln/364391\nhttps://vuldb.com/vuln/364391/cti\nhttps://vuldb.com/submit/811400\nhttps://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f\n","aliases":"CVE-2026-8766\nGHSA-rpc6-9c4p-j5cg\n","assigner":"VulDB","epss":0.32,"enisaIdProduct":[{"id":"06d1ce86-824f-3b78-a1f3-7351ef282998","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.43"},{"id":"08f03434-2dfd-3ec9-a52e-fb5802b7bc86","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.32"},{"id":"0d4c8868-01ca-3d05-bee0-a7282a4b6f67","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.45"},{"id":"0ee97696-a2e3-39f0-9688-dc68fbcc0d95","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.26"},{"id":"181cf9c5-d08c-3a04-85d5-30e60f0f0c1c","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.12"},{"id":"1e8e0432-3378-3704-add4-42d27ee6daba","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.37"},{"id":"23aae613-e2ed-3622-8196-aa6021d32be9","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.7"},{"id":"28e4c0f9-0149-3ecc-a45a-87625563b252","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.30"},{"id":"2b8b9410-6a7a-3c12-b5c7-33c48d6a4a5a","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.15"},{"id":"2c7ac625-fc41-3a0f-a8da-082c65b07c33","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.33"},{"id":"2ec31a6a-2d34-3dbc-aa5f-cfe09b137114","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.24"},{"id":"3dc29777-95c3-3422-af53-6317ce72952d","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.1"},{"id":"3e4d65b8-983e-3324-84e7-d52e431d768f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.6"},{"id":"3f581706-cb58-3f4c-90f8-59fd474e774e","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.23"},{"id":"4bdb2cf4-363e-345d-9f02-ad7bea9ae2ae","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.22"},{"id":"58a640cd-a8ca-35a6-b8f5-4b7c55f91e36","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.8"},{"id":"5e889fe9-3b2b-349b-85f9-8c8c040ac0d8","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.10"},{"id":"697715d1-659f-36b2-b31f-228c1c768297","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.35"},{"id":"6d1fe2cc-03c4-3808-87fb-cbfa1109b91e","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.28"},{"id":"7e913598-dc67-3432-be92-6c3f292b3684","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.18"},{"id":"899e5eec-d26f-3a9a-95ee-de6575d0a0fc","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.9"},{"id":"8f066097-0e54-301b-9c29-9823fe6f9909","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.38"},{"id":"95b440a8-f08d-3ed8-b847-4da1e40287d1","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.16"},{"id":"98f63997-5894-3085-b81b-ca9eb132a040","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.42"},{"id":"99207330-620f-33f3-a427-52ab06a0c11f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.47"},{"id":"a738e938-7565-36b0-a403-4dcb13ada4d0","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.44"},{"id":"b167ac33-2e10-3819-bcea-6f40fa3a7635","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.2"},{"id":"b21adaa2-96a5-3874-8dcb-84b2938f9ca3","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.11"},{"id":"b287d782-e6da-3592-a008-981ec33a4e12","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.27"},{"id":"b5242cbb-a16b-37d1-bfe0-388760daf93f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.19"},{"id":"b6d3e2c1-cfd6-34fa-8892-c36c73dddeed","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.13"},{"id":"b9ec2184-d326-3be6-b8fd-0f2aa15d2603","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.4"},{"id":"bda01ce5-c0f5-3368-8c0c-87969450ebbd","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.25"},{"id":"bfd0b1fe-cc2b-3859-b257-f1033db5f16f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.46"},{"id":"bfd180a9-7511-34a4-9089-197e384db929","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.36"},{"id":"c33b71eb-a7e7-3293-abbe-5fccfe4c56a9","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.29"},{"id":"c41ad12e-6e5e-3d2d-a273-2a8d7a925075","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.17"},{"id":"cd257a29-9035-3a8e-8bb8-8e3f646821de","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.34"},{"id":"cf41a49f-ab47-33de-945a-b6e938168397","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.39"},{"id":"d2106c7c-94cc-301a-8575-27d04fb1fbfa","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.41"},{"id":"d97f4645-e928-3194-a924-4c183d05544c","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.40"},{"id":"da4dd8b8-6f6c-3ea7-a0cc-fb4b3ad159ee","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.3"},{"id":"eb1e7218-f0ce-3f1d-b644-efd4f9e721f2","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.31"},{"id":"ec9a93da-a647-39d8-ad5b-abf98b932c80","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.21"},{"id":"ee70b52f-6a62-368d-926e-2962c2531bfd","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.0"},{"id":"f7b327f3-645e-3a81-a788-ff4fb6413f8d","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.20"},{"id":"f9c4d60d-1fc6-3ac0-9260-e9afa884131b","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.14"},{"id":"fb85abf8-3da9-3662-a324-fa0175166a9a","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.5"}],"enisaIdVendor":[{"id":"de106770-8591-3587-9ea9-3387ccdddc0e","vendor":{"name":"Kilo-Org"}}],"enisaIdVulnerability":[{"id":"0d4f416a-a5d6-3701-a275-ab166def573c","vulnerability":{"id":"CVE-2026-8766","description":"A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","datePublished":"May 17, 2026, 10:15:08 PM","dateUpdated":"May 18, 2026, 5:51:42 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://vuldb.com/vuln/364391\nhttps://vuldb.com/vuln/364391/cti\nhttps://vuldb.com/submit/811400\nhttps://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f\n","enisa_id":"EUVD-2026-30710\n","assigner":"VulDB","epss":0.32,"dataProcessed":"Oct 30, 2026, 7:18:23 AM","vulnerabilityProduct":[{"id":"016e242f-b227-3369-b7a2-b29e6c3e8b7f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.2"},{"id":"030fbbdc-c2e6-367c-a56c-c2ccc5b557ce","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.11"},{"id":"042c3362-fa01-35e3-98cb-09107d583363","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.39"},{"id":"0725e40f-1775-3f74-b911-1c2470ece1cc","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.30"},{"id":"09d7824a-674e-3aed-8bbc-a9fd2f0a3b15","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.13"},{"id":"0b94c042-8240-3d92-9155-cca7ffce9ae2","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.33"},{"id":"0be7d3a9-c230-3e63-9c8c-63f06e3165ef","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.23"},{"id":"112083bf-e4b4-3541-aae1-371f1575bf79","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.22"},{"id":"2540488f-ada9-3ebe-b74c-e0bcc5e166dd","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.4"},{"id":"28fe646b-54a6-3cf2-a8ae-a74656275369","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.10"},{"id":"2d58e4f9-559d-3994-867b-0640a1b28af1","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.24"},{"id":"32039ca2-6def-389e-aaf0-245a0b0abbcb","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.16"},{"id":"331973ae-6bda-3014-90bf-329dc787ad94","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.1"},{"id":"40cce505-2994-34b6-8904-b5a349a2d8a3","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.42"},{"id":"43ab203c-1441-3e22-8f0e-517259df46fd","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.32"},{"id":"48f7c6dc-cedf-3215-bb00-6001e7bb3ee2","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.43"},{"id":"4924b8f7-1183-32a3-a56e-400a1b986ddc","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.8"},{"id":"52d01535-df30-36e9-9dbd-98a8cb25c0fd","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.6"},{"id":"539b6bb5-f122-3f2c-980c-aed4ed7bedf1","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.44"},{"id":"578f609f-c783-3c4d-a640-bf9d106c3b1e","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.5"},{"id":"58764f9b-6b1b-3bc4-97a6-763d0d5f1445","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.35"},{"id":"616cd45a-9167-3b40-928f-03c0e922273d","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.29"},{"id":"61a0b6a9-f0e9-3fd2-9b08-2d855a450bc8","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.47"},{"id":"61a72d5a-5281-35ce-a7d3-ace3d2366240","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.12"},{"id":"624df51f-9797-35aa-b975-46873c0663b0","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.40"},{"id":"655d998d-4aed-3f68-8116-423c773e968b","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.27"},{"id":"666a82d5-d4b3-3f4c-9a86-dc5a53d75c62","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.26"},{"id":"69d00839-d91b-38cf-8f24-a6da570bb05d","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.45"},{"id":"78b1af48-43f6-3fa3-b271-25b0f06b0671","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.38"},{"id":"7c842a4c-a875-3c50-a8f4-024d5d401b0f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.19"},{"id":"96ec1f4c-c869-367d-b59e-031348531d64","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.0"},{"id":"a18ea5a5-dbed-3bce-8d57-2058afcf9e4f","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.46"},{"id":"a26a69be-0bf1-3f8c-be8d-b89975f02513","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.18"},{"id":"adc1e974-1c99-3186-9947-b2496f5320aa","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.3"},{"id":"b12b76c1-86de-3e23-aa83-3cf022745861","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.7"},{"id":"bc62a6a8-b184-3bab-9302-62662678b66c","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.37"},{"id":"bcfb522c-0d31-3346-ab63-b093efbf3bff","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.15"},{"id":"bea2bad6-8fd6-376c-9b1d-a645e8907971","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.41"},{"id":"c9c45d1b-c26b-3476-8e8d-011a095e42ee","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.20"},{"id":"cc1ae421-df28-3ecd-8d26-4e5d9af6f798","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.31"},{"id":"cdd97143-8ac9-3140-a980-f5e64f5c82e4","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.9"},{"id":"cf29ec81-9147-3b63-ab18-072e2d884e18","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.34"},{"id":"d67b2159-5ee5-3923-a455-ab09995365c2","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.17"},{"id":"e3d10feb-9deb-39e7-a625-0be3147d1a7b","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.25"},{"id":"e45edcb1-b37f-3240-96c9-eeb950799065","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.21"},{"id":"e67a6f28-f828-307a-a167-018294b0a968","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.14"},{"id":"e7bcc5c2-210c-39d6-9900-b5b4f77a3a25","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.36"},{"id":"ff27725c-bfea-33f0-9e29-a255ea721d7d","product":{"name":"kilocode","vendor":{"name":"Kilo-Org"}},"product_version":"7.0.28"}],"vulnerabilityVendor":[{"id":"c74543dd-215d-384b-8ac3-e71b87b26b2b","vendor":{"name":"Kilo-Org"}}]}},{"id":"8ed1b652-50b4-3c4b-a129-1258521c6918","vulnerability":{"id":"GHSA-rpc6-9c4p-j5cg","description":"@kilocode/cli Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor","datePublished":"May 18, 2026, 12:31:36 AM","dateUpdated":"May 28, 2026, 8:05:02 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-8766\nhttps://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f\nhttps://github.com/Kilo-Org/kilocode\nhttps://vuldb.com/submit/811400\nhttps://vuldb.com/vuln/364391\nhttps://vuldb.com/vuln/364391/cti\n","enisa_id":"EUVD-2026-30710\n","aliases":"CVE-2026-8766\nGHSA-rpc6-9c4p-j5cg\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}