Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-49484

Code for IBM i: Temporary files are visible to all users

Description

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where /tmp is accessible to other local accounts, file contents remain readable after download or editing operations. This issue is fixed in version 3.0.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

codefori vscode-ibmi

  • < 3.0.1affected

References