CVE-2026-8766

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8766", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-05-17T08:55:27.777Z", "datePublished": "2026-05-17T22:15:08.997Z", "dateUpdated": "2026-05-18T17:51:42.789Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-17T22:15:08.997Z"}, "title": "Kilo-Org kilocode Environment Variable config.ts load information disclosure", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "Information Disclosure"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "Improper Access Controls"}]}], "affected": [{"vendor": "Kilo-Org", "product": "kilocode", "versions": [{"version": "7.0.0", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.0.3", "status": "affected"}, {"version": "7.0.4", "status": "affected"}, {"version": "7.0.5", "status": "affected"}, {"version": "7.0.6", "status": "affected"}, {"version": "7.0.7", "status": "affected"}, {"version": "7.0.8", "status": "affected"}, {"version": "7.0.9", "status": "affected"}, {"version": "7.0.10", "status": "affected"}, {"version": "7.0.11", "status": "affected"}, {"version": "7.0.12", "status": "affected"}, {"version": "7.0.13", "status": "affected"}, {"version": "7.0.14", "status": "affected"}, {"version": "7.0.15", "status": "affected"}, {"version": "7.0.16", "status": "affected"}, {"version": "7.0.17", "status": "affected"}, {"version": "7.0.18", "status": "affected"}, {"version": "7.0.19", "status": "affected"}, {"version": "7.0.20", "status": "affected"}, {"version": "7.0.21", "status": "affected"}, {"version": "7.0.22", "status": "affected"}, {"version": "7.0.23", "status": "affected"}, {"version": "7.0.24", "status": "affected"}, {"version": "7.0.25", "status": "affected"}, {"version": "7.0.26", "status": "affected"}, {"version": "7.0.27", "status": "affected"}, {"version": "7.0.28", "status": "affected"}, {"version": "7.0.29", "status": "affected"}, {"version": "7.0.30", "status": "affected"}, {"version": "7.0.31", "status": "affected"}, {"version": "7.0.32", "status": "affected"}, {"version": "7.0.33", "status": "affected"}, {"version": "7.0.34", "status": "affected"}, {"version": "7.0.35", "status": "affected"}, {"version": "7.0.36", "status": "affected"}, {"version": "7.0.37", "status": "affected"}, {"version": "7.0.38", "status": "affected"}, {"version": "7.0.39", "status": "affected"}, {"version": "7.0.40", "status": "affected"}, {"version": "7.0.41", "status": "affected"}, {"version": "7.0.42", "status": "affected"}, {"version": "7.0.43", "status": "affected"}, {"version": "7.0.44", "status": "affected"}, {"version": "7.0.45", "status": "affected"}, {"version": "7.0.46", "status": "affected"}, {"version": "7.0.47", "status": "affected"}], "cpes": ["cpe:2.3:a:kilo-org:kilocode:*:*:*:*:*:*:*:*"], "modules": ["Environment Variable Handler"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-05-17T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-05-17T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-05-17T11:00:35.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Eric-d (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/364391", "name": "VDB-364391 | Kilo-Org kilocode Environment Variable config.ts load information disclosure", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/364391/cti", "name": "VDB-364391 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/811400", "name": "Submit #811400 | Kilo-Org kilocode 7.0.47 Arbitrary File Read (CWE-200)", "tags": ["third-party-advisory"]}, {"url": "https://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T14:54:24.339328Z", "id": "CVE-2026-8766", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T17:51:42.789Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8766", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-18T14:54:24.339328Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T15:52:31.725Z"}}], "cna": {"title": "Kilo-Org kilocode Environment Variable config.ts load information disclosure", "credits": [{"lang": "en", "type": "reporter", "value": "Eric-d (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:kilo-org:kilocode:*:*:*:*:*:*:*:*"], "vendor": "Kilo-Org", "modules": ["Environment Variable Handler"], "product": "kilocode", "versions": [{"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.0.4"}, {"status": "affected", "version": "7.0.5"}, {"status": "affected", "version": "7.0.6"}, {"status": "affected", "version": "7.0.7"}, {"status": "affected", "version": "7.0.8"}, {"status": "affected", "version": "7.0.9"}, {"status": "affected", "version": "7.0.10"}, {"status": "affected", "version": "7.0.11"}, {"status": "affected", "version": "7.0.12"}, {"status": "affected", "version": "7.0.13"}, {"status": "affected", "version": "7.0.14"}, {"status": "affected", "version": "7.0.15"}, {"status": "affected", "version": "7.0.16"}, {"status": "affected", "version": "7.0.17"}, {"status": "affected", "version": "7.0.18"}, {"status": "affected", "version": "7.0.19"}, {"status": "affected", "version": "7.0.20"}, {"status": "affected", "version": "7.0.21"}, {"status": "affected", "version": "7.0.22"}, {"status": "affected", "version": "7.0.23"}, {"status": "affected", "version": "7.0.24"}, {"status": "affected", "version": "7.0.25"}, {"status": "affected", "version": "7.0.26"}, {"status": "affected", "version": "7.0.27"}, {"status": "affected", "version": "7.0.28"}, {"status": "affected", "version": "7.0.29"}, {"status": "affected", "version": "7.0.30"}, {"status": "affected", "version": "7.0.31"}, {"status": "affected", "version": "7.0.32"}, {"status": "affected", "version": "7.0.33"}, {"status": "affected", "version": "7.0.34"}, {"status": "affected", "version": "7.0.35"}, {"status": "affected", "version": "7.0.36"}, {"status": "affected", "version": "7.0.37"}, {"status": "affected", "version": "7.0.38"}, {"status": "affected", "version": "7.0.39"}, {"status": "affected", "version": "7.0.40"}, {"status": "affected", "version": "7.0.41"}, {"status": "affected", "version": "7.0.42"}, {"status": "affected", "version": "7.0.43"}, {"status": "affected", "version": "7.0.44"}, {"status": "affected", "version": "7.0.45"}, {"status": "affected", "version": "7.0.46"}, {"status": "affected", "version": "7.0.47"}]}], "timeline": [{"lang": "en", "time": "2026-05-17T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-05-17T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-05-17T11:00:35.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/364391", "name": "VDB-364391 | Kilo-Org kilocode Environment Variable config.ts load information disclosure", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/364391/cti", "name": "VDB-364391 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/811400", "name": "Submit #811400 | Kilo-Org kilocode 7.0.47 Arbitrary File Read (CWE-200)", "tags": ["third-party-advisory"]}, {"url": "https://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "Information Disclosure"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Controls"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-17T22:15:08.997Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8766", "state": "PUBLISHED", "dateUpdated": "2026-05-18T17:51:42.789Z", "dateReserved": "2026-05-17T08:55:27.777Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-05-17T22:15:08.997Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:kilo-org:kilocode:*:*:*:*:*:*:*:*"], "modules": ["Environment Variable Handler"], "product": "kilocode", "vendor": "Kilo-Org", "versions": [{"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.0.4"}, {"status": "affected", "version": "7.0.5"}, {"status": "affected", "version": "7.0.6"}, {"status": "affected", "version": "7.0.7"}, {"status": "affected", "version": "7.0.8"}, {"status": "affected", "version": "7.0.9"}, {"status": "affected", "version": "7.0.10"}, {"status": "affected", "version": "7.0.11"}, {"status": "affected", "version": "7.0.12"}, {"status": "affected", "version": "7.0.13"}, {"status": "affected", "version": "7.0.14"}, {"status": "affected", "version": "7.0.15"}, {"status": "affected", "version": "7.0.16"}, {"status": "affected", "version": "7.0.17"}, {"status": "affected", "version": "7.0.18"}, {"status": "affected", "version": "7.0.19"}, {"status": "affected", "version": "7.0.20"}, {"status": "affected", "version": "7.0.21"}, {"status": "affected", "version": "7.0.22"}, {"status": "affected", "version": "7.0.23"}, {"status": "affected", "version": "7.0.24"}, {"status": "affected", "version": "7.0.25"}, {"status": "affected", "version": "7.0.26"}, {"status": "affected", "version": "7.0.27"}, {"status": "affected", "version": "7.0.28"}, {"status": "affected", "version": "7.0.29"}, {"status": "affected", "version": "7.0.30"}, {"status": "affected", "version": "7.0.31"}, {"status": "affected", "version": "7.0.32"}, {"status": "affected", "version": "7.0.33"}, {"status": "affected", "version": "7.0.34"}, {"status": "affected", "version": "7.0.35"}, {"status": "affected", "version": "7.0.36"}, {"status": "affected", "version": "7.0.37"}, {"status": "affected", "version": "7.0.38"}, {"status": "affected", "version": "7.0.39"}, {"status": "affected", "version": "7.0.40"}, {"status": "affected", "version": "7.0.41"}, {"status": "affected", "version": "7.0.42"}, {"status": "affected", "version": "7.0.43"}, {"status": "affected", "version": "7.0.44"}, {"status": "affected", "version": "7.0.45"}, {"status": "affected", "version": "7.0.46"}, {"status": "affected", "version": "7.0.47"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kilo:kilo_code_cli:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "7FA8CC8A-DFED-48D2-9553-E1A7295A8767", "versionEndIncluding": "7.0.47", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO_CONFIG_CONTENT can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha encontrado un fallo en el kiloc\u00f3digo de Kilo-Org hasta la versi\u00f3n 7.0.47. Este problema afecta a la funci\u00f3n Load del archivo packages/opencode/src/config/config.ts del componente Gestor de Variables de Entorno. La ejecuci\u00f3n de una manipulaci\u00f3n del argumento KILO_CONFIG_CONTENT puede llevar a la revelaci\u00f3n de informaci\u00f3n. Es posible lanzar el ataque de forma remota. El exploit ha sido publicado y puede ser utilizado. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta revelaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-8766", "lastModified": "2026-10-14T20:10:00.190", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8766", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-18T14:54:24.339328Z", "version": "2.0.3"}}]}, "published": "2026-05-17T23:17:02.640", "references": [{"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/submit/811400"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/vuln/364391"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/vuln/364391/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}], "source": "cna@vuldb.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.0.0,7.0.47]"}}], "enrichment": {"confidence": 84.0, "confidence_source": "matching", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 84.0, "source": "matching"}]}, "original": {"product": "kilocode", "source": "cna", "vendor": "Kilo-Org"}, "product": "kilo_code", "vendor": "kilo"}], "created": "2026-05-17T23:30:12.390168+00:00", "updated": "2026-05-19T23:00:13.100167+00:00", "vendors": ["kilo", "kilo$PRODUCT$kilo_code"]}