Executive brief
Kimi AI is an artificial intelligence platform used for generating content and code. A security flaw in its web interface allows malicious code generated by the AI to run directly in a user's browser when they use the 'Preview' feature. This could allow an attacker to steal session cookies, hijack user accounts, or perform unauthorized actions on behalf of the user.
Technical details
A stored-like Cross-Site Scripting (XSS) vulnerability exists in the 'Preview' feature of Kimi AI v1.0. The root cause is a failure to properly sanitize or encode HTML and JavaScript payloads generated by the AI model before rendering them in the Document Object Model (DOM). An attacker can craft a prompt that induces the AI to generate malicious scripts; when a user navigates to the 'Preview' tab to view this output, the script executes in the context of the victim's browser session. This can lead to session hijacking via cookie theft or unauthorized API requests.
Affected products
- Kimi AI Kimi AI 1.0
Timeline
- 2026-06-03: disclosed: CVE published to NVD