According to CoinMeta, foreign media have exposed that Kimi Desktop has security vulnerabilities. Once the update link is compromised, malware could be installed on users' computers as an update. Based on reverse analysis of runtimewire, versions 3.1.5 and 3.1.10 of Kimi Desktop automatically download an independent program called `kimiim-cli` that is related to group chat functionality. However, before installation, the client does not check whether the file has been tampered with, nor does it verify if the program is signed by "The Dark Side of the Moon." This program obtains the latest version through "The Dark Side of the Moon"'s CDN. If the relevant release account or update link is breached, attackers can replace the legitimate program with malicious code, and Kimi Desktop may still install it on users' computers following the normal update process without requiring access to "The Dark Side of the Moon"'s code signing key. Currently, kimiim-cli on CDN comes with a valid digital signature from "The Dark Side of the Moon," and there is no evidence that this issue has been actually exploited. The problem is that Kimi Desktop does not enforce verification of this signature before installation. runtimewire claims to have reported the issue to "The Dark Side of the Moon" in advance, but as of the time of publication, no response has been received.