Security Policy

Supported Versions

Currently, Kimi Code only provides security support for the latest released version.

Reporting a Vulnerability

We take security seriously. Please do not open a public issue for security vulnerabilities.

Preferred channel:

• GitHub Security Advisories — https://github.com/MoonshotAI/kimi-code/security/advisories/new (private disclosure, tracked with the codebase)

Alternative channel:

• Email: code@moonshot.ai (please include "[security]" in the subject)

What to Include

• Affected version (output of kimi --version)
• Reproduction steps
• Impact assessment
• Any suggested mitigation

Our Response

We will acknowledge your report and provide an initial assessment as soon as we can.

Public Disclosure

We will coordinate with you on disclosure timing once a fix is ready.