CVE-2026-49484 in Vscode-Ibmi
摘要
由 MITRE • 2026-10-13
Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where /tmp is accessible to other local accounts, file contents remain readable after download or editing operations. This issue is fixed in version 3.0.1.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.