LLMMedium
CVE-2025-11445: A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of th…
- Occurred
- Oct 8, 2025
- Published
- Oct 8, 2025
- Source
- NVD CVE
Summary
A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue.
Tags
- CVE
- CVE-2025-11445
- cvss:MEDIUM
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Vulnerability in AI coding assistant allows remote injection, but no confirmed harm or breach reported.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8