CVE-2025-62356

Qodo / Qodo Gen PUBLISHED

Description (CNA)

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

Affected (CNA)

Vendor / product	Versions
Qodo / Qodo Gen	affected *

CWE

CWE-22

References

https://hiddenlayer.com/sai_security_advisor/2025-10-qodogen/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.