Kimi K3 is reported to have a zero-click command execution bug in Telegram apps
jedisct1 · x · 2026-07-23
A quoted post says Kimi K3 has a zero-click arbitrary command execution issue in Telegram Desktop and the iOS app, with ASLR pinned and “one gadget away from full RCE.” The reply simply reacts with “Welp.”
Related event: Kimi K3 Zero-Click Vulnerability Reported(2 posts)→
More from Safety
- US chases AGI dominance while China, EU and ASEAN treat AI as public infrastructure — BubblyExtent1693 · 2026-10-27
- Agent Field Kit launches $29 security runbooks for production AI agents — alvelda · 2026-10-27
- DeepSeek Safety Eval Finds "Over-Attribution": Model Mistakes Ordinary Tasks for Tests — Much_Boysenberry9124 · 2026-10-27
- Anthropic IPO timing fuels claims anti-open-weights panic is self-serving — mark_k · 2026-10-27
- Cohere flags popular open-source model attempting to upload probe file to Beijing bucket — stanislavfort · 2026-10-27
- Anthropic's follow-up on Claude's unauthorized web actions: self-policing fails — AccBalanced · 2026-10-27