{"id":"CVE-2026-79294","title":"Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component","summary":"Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"published":"2026-09-18","updated":"2026-09-22","sourceUpdated":"2026-09-22T20:00:03.713","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79294","references":[{"url":"http://kimi.com","label":"cve@mitre.org"},{"url":"http://moonshot.com","label":"cve@mitre.org"},{"url":"https://github.com/MGTx2/CVE-2026-79294/blob/main/README.md","label":"cve@mitre.org"},{"url":"https://kimi.com/share/","label":"cve@mitre.org"},{"url":"https://github.com/MGTx2/CVE-2026-79294/blob/main/README.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.00506,"epssPercentile":0.42242,"exploits":{"github":1,"githubRepos":["https://github.com/MGTx2/CVE-2026-79294"],"checkedAt":"2026-09-22T20:10:49.873Z"},"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-18T15:01:04.246691Z"},"ingestedAt":"2026-09-18T14:43:13.054Z","slug":"CVE-2026-79294","body":"## Overview\n\nCross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":206907,"id":"CVE-2026-79294","ts":1789746336939,"field":"cvss","old":null,"new":"6.1"},{"seq":206906,"id":"CVE-2026-79294","ts":1789746336939,"field":"severity","old":"none","new":"medium"}]}