Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #2

Kilo Code vulnerability lets local attackers run code

Original: 🚨 EUVD-2026-89423 📊 Score: 8.4/10 (CVSS v3.1) 📅 Published: 2026-09-29 | Updated: 2026-09-30 📝 An issue in Kilo Code befo

A high-severity flaw tracked as EUVD-2026-89423 affects Kilo Code versions before v7.4.1, scoring 8.4 out of 10 under CVSS v3.1. The issue, published on 29 September 2026 and updated a day later, allows a local attacker to execute arbitrary code through the permission or allow-everything endpoint. Users are urged to update to v7.4.1 or later.

Why now: Security teams are flagging a newly published high-severity vulnerability affecting users of the Kilo Code tool.

Kilo CodeENISAEUVD-2026-89423

Open on mastodon →

Evidence

• 🚨 EUVD-2026-89423 📊 Score: 8.4/10 (CVSS v3.1) 📅 Published: 2026-09-29 | Updated: 2026-09-30 📝 An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint 🔗 https:// euvd.enisa.europa.eu/vulnerabi… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/528008