An issue in Kilo Code before version 7.4.1 allows a local attacker to execute arbitrary code by invoking the permission/allow‑everything endpoint. The vulnerability enables code execution within the application process, potentially granting the attacker significant control over the host system.

All Kilo‑Org Kilo Code deployments running any release earlier than 7.4.1 are affected. The vulnerability targets the permission/allow‑everything endpoint exposed by the web service.

The CVSS score of 8.4 classifies this flaw as high severity, indicating that if exploited it could lead to complete compromise of the host. The EPSS score is less than 1 %, suggesting a low probability of exploitation, and it is not listed in the CISA KEV catalog. An attacker must have local access to the machine running Kilo Code to trigger the flaw by calling the vulnerable endpoint; no public exploit has been reported to date.