CVE-2025-11445 in Kilo Codeinformazioni

Riassunto

di MITRE • 08/10/2025

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsabile

VulDB

Divulgazione

08/10/2025

Moderazione

accettato

CPE

pronto

Sfruttamento

Scaricare

EPSS

0.00297

KEV

no

Attività

molto basso

Fonti

Do you know our Splunk app?

Download it now for free!