Kimi Work Desktop App Sends Raw Agent Sessions in Feedback Reports

TL;DR. A reverse engineering effort revealed the Kimi Work desktop application attaches the last five raw agent sessions to user feedback reports without explicit notification. - Users are unaware their complete interaction history, which may contain sensitive data, is included in support submissions. - This data collection practice raises significant privacy concerns for users of the AI agent application. - A security researcher discovered the behavior and alerted the vendor, Kimi Work, about the issue.

• Kimi Work desktop app secretly includes last 5 agent sessions in feedback reports.
• This practice was discovered via reverse engineering by a security researcher.
• Users are not notified that their raw session data is being transmitted.
• The sessions could contain sensitive user input or private information.
• The researcher has notified Kimi Work of the potential privacy breach.

Back to QLANKR News