CVE-2025-11445 Kilo Code Prompt ClineProvider.ts ClineProvider injection

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...

CVE-2025-11445 Kilo Code Prompt ClineProvider.ts ClineProvider injection

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...

CVE-2025-11445: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...

PT-2025-41241

Name of the Vulnerable Software and Affected Versions Kilo Code versions prior to 4.86.0 Description A flaw exists in Kilo Code that allows for injection through manipulation of the ClineProvider function within the src/core/webview/ClineProvider.ts file of the Prompt Handler component. This issu...

Kilo Code 安全漏洞

Kilo Code is an AI coding assistant open-sourced by Kilo Code. A security vulnerability exists in Kilo Code 4.86.0 and earlier versions, which stems from improper manipulation of the ClineProvider function in the Prompt Handler component, which could lead to an injection attack...

EUVD-2020-13122

Malware in sbrugna...

EUVD-2017-0144

Malware in sbrugna...

Malicious code in kilo-yankee-november-itgzi (npm)

The package kilo-yankee-november-itgzi was found to contain malicious code...

Malicious code in kilo-tango-banana-utzzo (npm)

The package kilo-tango-banana-utzzo was found to contain malicious code...

MAL-2025-44870 Malicious code in kilo-november-banana-ykktm (npm)

The package kilo-november-banana-ykktm was found to contain malicious code...

MAL-2025-44087 Malicious code in echo-kilo-elderberry-dwkcs (npm)

The package echo-kilo-elderberry-dwkcs was found to contain malicious code...

Malicious code in nectarine-kilo-yam-ezsuk (npm)

The package nectarine-kilo-yam-ezsuk was found to contain malicious code...

MAL-2025-44445 Malicious code in golf-nectarine-kilo-trund (npm)

The package golf-nectarine-kilo-trund was found to contain malicious code...

Malicious code in echo-kilo-elderberry-dwkcs (npm)

The package echo-kilo-elderberry-dwkcs was found to contain malicious code...

Malicious code in golf-nectarine-kilo-trund (npm)

The package golf-nectarine-kilo-trund was found to contain malicious code...

MAL-2025-45286 Malicious code in nectarine-kilo-yam-ezsuk (npm)

The package nectarine-kilo-yam-ezsuk was found to contain malicious code...

MAL-2025-44872 Malicious code in kilo-tango-banana-utzzo (npm)

The package kilo-tango-banana-utzzo was found to contain malicious code...

MAL-2025-44871 Malicious code in kilo-raspberry-tango-kjtzw (npm)

The package kilo-raspberry-tango-kjtzw was found to contain malicious code...

Malicious code in kilo-november-banana-ykktm (npm)

The package kilo-november-banana-ykktm was found to contain malicious code...

Malicious code in kilo-raspberry-tango-kjtzw (npm)

The package kilo-raspberry-tango-kjtzw was found to contain malicious code...