kilo has 2 CVEs on record. The median CVSS is 4.3 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
kilo vulnerabilities
CVEs affecting kilo, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-8766Medium· 4.3A flaw has been found in Kilo-Org kilocode up to 7.0.47
A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILO…
▾ Sunlitkilo · kilo_code_cliEPSS 0.48%via NVD
CVE-2026-8765Medium· 4.3A vulnerability was detected in Kilo-Org kilocode up to 7.0.47
A vulnerability was detected in Kilo-Org kilocode up to 7.0.47. This vulnerability affects the function Bun.file of the file packages/opencode/src/kilocode/review/worktree-diff.ts of the component File Diff API Endpoint. Performing a man…
▾ Sunlitkilo · kilo_codeEPSS 0.78%via NVD