Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-62356

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s sys

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HiddenLayer

Description

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qodo Qodo Gen

Default version status: unaffected

  • *affected

References