Description
A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Kilo Code
4.0affected4.1affected4.2affected4.3affected4.4affected4.5affected4.6affected4.7affected4.8affected4.9affected4.10affected4.11affected4.12affected4.13affected4.14affected4.15affected4.16affected4.17affected4.18affected4.19affected4.20affected4.21affected4.22affected4.23affected4.24affected4.25affected4.26affected4.27affected4.28affected4.29affected4.30affected4.31affected4.32affected4.33affected4.34affected4.35affected4.36affected4.37affected4.38affected4.39affected4.40affected4.41affected4.42affected4.43affected4.44affected4.45affected4.46affected4.47affected4.48affected4.49affected4.50affected4.51affected4.52affected4.53affected4.54affected4.55affected4.56affected4.57affected4.58affected4.59affected4.60affected4.61affected4.62affected4.63affected4.64affected4.65affected4.66affected4.67affected4.68affected4.69affected4.70affected4.71affected4.72affected4.73affected4.74affected4.75affected4.76affected4.77affected4.78affected4.79affected4.80affected4.81affected4.82affected4.83affected4.84affected4.85affected4.86.0affected
References
- https://vuldb.com/?id.327382 ↗
- https://vuldb.com/?ctiid.327382 ↗
- https://vuldb.com/?submit.667004 ↗
- https://mcpsec.dev/advisories/2025-10-02-kilo-code-ai-agent-supply-chain-attack/ ↗
- https://github.com/Kilo-Org/kilocode/pull/2244 ↗
- https://github.com/Kilo-Org/kilocode/pull/2244/commits/2fdddf89edba41ec3a527134e485a3388c464333 ↗