Skip to content
KC

Kilo Code v7.8.16

Released · Kilo Code

Pre-releaseSecurity fix

What the release notes say

CLI

Patch Changes

  • #15383 82926fb - Restrict browser links and MCP OAuth authorization URLs to HTTP(S), and fix unsafe URL handling on Windows and WSL.

  • #15365 c7b9c36 - Block compromised eMudhra certificate chains with a fixed, pinned Bun runtime on all CLI platforms.

    Keep Nix CLI builds compatible with the pinned runtime.

  • #15293 2e17931 - Treat shell expressions in MCP prompts as literal text instead of executing them locally.

  • #15350 4481e06 - Restore session pull request badges when remote control is disabled.

  • #15351 2f452d7 - Add an internal Session Host registry and the built-in Kilo Cloud provider that lists, reads, starts, and describes cloud-hosted sessions.