{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.0.47"}],"component":"@kilocode/cli","cve_ids":["CVE-2026-8766"],"ecosystem":"npm","epss":0.00316,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rpc6-9c4p-j5cg","id":"tcs_01M5KG9HEYJM2T10R7W39GEJSJ","modified_at":"2026-09-10T03:51:07.015389696Z","published_at":"2026-05-18T00:31:36Z","references":["https://osv.dev/vulnerability/GHSA-rpc6-9c4p-j5cg","https://nvd.nist.gov/vuln/detail/CVE-2026-8766","https://gist.github.com/YLChen-007/32b444e49ced1a46bde5a68933ccd09f","https://github.com/Kilo-Org/kilocode","https://vuldb.com/submit/811400","https://vuldb.com/vuln/364391","https://vuldb.com/vuln/364391/cti"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-rpc6-9c4p-j5cg","url":"https://osv.dev/vulnerability/GHSA-rpc6-9c4p-j5cg"}],"summary":"@kilocode/cli Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor"}