TECH Signal 260
Kimi Work silently attaches last five agent sessions to feedback reports
↗
Illustration only Photo by Dharaneeswaran R on Unsplash
A reverse-engineer found that Kimi Work's desktop app includes the five most recent agent sessions when users submit feedback reports, with no disclosure to the user.
Users submitting what they believe is simple feedback are unknowingly transmitting their recent session data, which could contain sensitive or confidential information. The lack of any consent mechanism means teams using Kimi Work may be leaking proprietary data through routine feedback submissions.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Kimi Work's desktop app attaches the five latest agent sessions to feedback reports without user notice.
The sessions could contain any information users previously shared with the agent.
The discovery was made through reverse engineering and reported to Kimi by the researcher.
THE CLUSTER