LLMMedium
CVE-2025-62356: A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to re…
- Occurred
- Oct 17, 2025
- Published
- Oct 17, 2025
- Source
- NVD CVE
Summary
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.
Tags
- CVE
- CVE-2025-62356
- cvss:HIGH
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Vulnerability in AI IDE tool enabling file access via prompt injection, classified as LLM security issue.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8