Security Advisory
CVE-2025-62356
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.