CVE-2025-62356
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s …
Published: 2025-10-17 · CVSS: 7.5 · CVSS 3.1
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7