Skip to content
Image: SecurityOnline

SecurityOnlineDo Son

Moonshot AI unveils 2.8T parameter Kimi K3 with AgentENV sandbox

Part of the Kimi story · since 24 Jul

Quiet for 12 weekslast report 10 Aug5 articles3 outlets
24 Jul · The Hacker News first13 Sep30 Sep17 OctNowThis article2nd of 5
  • Fri 24 Jul, 08:49 UTC. The Hacker News, first report. Kimi K3 Agents Find Redis Zero-Day, Trigger RCE Exploit.
  • Tue 28 Jul, 05:41 UTC. SecurityOnline, its first report on the story. Moonshot AI unveils 2.8T parameter Kimi K3 with AgentENV sandbox. This article, 2nd of 5.
  • Mon 3 Aug, 08:31 UTC. SecurityOnline. Developer runs Kimi K3 model via C99 engine on modest hardware.
  • Fri 7 Aug, 03:41 UTC. SecurityOnline. Model Kimi K3 Escapes Sandbox, Reaches GitHub via CVE-2026-63077. Cites a CVE in CISA KEV.
  • Mon 10 Aug, 08:32 UTC. Security Affairs, its first report on the story. Kimi K3 AI Model Cheats UK Cyber Benchmark via GitHub Access.

How the story developed

All 5 articles
Quiet for 12 weekslast report 10 Aug5 articles3 outlets

5 articles from 3 outlets since 24 Jul. Quiet since 10 Aug. This was the 2nd report, 4 days after the first.

Now24 Jul272931246810First reportThe Hacker News · 24 Jul, 08:49This article2nd of 5 · day 4Exploited CVESecurityOnline · 7 Aug
  • Fri 24 Jul, 08:49 UTC. The Hacker News, first report. Kimi K3 Agents Find Redis Zero-Day, Trigger RCE Exploit.
  • Tue 28 Jul, 05:41 UTC. SecurityOnline, its first report on the story. Moonshot AI unveils 2.8T parameter Kimi K3 with AgentENV sandbox. This article, 2nd of 5.
  • Mon 3 Aug, 08:31 UTC. SecurityOnline. Developer runs Kimi K3 model via C99 engine on modest hardware.
  • Fri 7 Aug, 03:41 UTC. SecurityOnline. Model Kimi K3 Escapes Sandbox, Reaches GitHub via CVE-2026-63077. Cites a CVE in CISA KEV.
  • Mon 10 Aug, 08:32 UTC. Security Affairs, its first report on the story. Kimi K3 AI Model Cheats UK Cyber Benchmark via GitHub Access.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Fri 24 JulDay 01
    1. Kimi K3 Agents Find Redis Zero-Day, Trigger RCE Exploit08:49 · The Hacker News · First report
  2. Quiet for 4 days

    Tue 28 JulDay 41
    1. Moonshot AI unveils 2.8T parameter Kimi K3 with AgentENV sandbox05:41 · SecurityOnline · Picked up again · This article, 2nd of 5
  3. Quiet for 6 days

    Mon 3 AugDay 101
    1. Developer runs Kimi K3 model via C99 engine on modest hardware08:31 · SecurityOnline · Picked up again
  4. Quiet for 4 days

    Fri 7 AugDay 141
    1. Model Kimi K3 Escapes Sandbox, Reaches GitHub via CVE-2026-6307703:41 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE
  5. Quiet for 3 days

    Mon 10 AugDay 171
    1. Kimi K3 AI Model Cheats UK Cyber Benchmark via GitHub Access08:32 · Security Affairs · Picked up again

Sources

Updated AboutDevelopersSign in