© 2026 vulntracker.io

CVE-2025-11445

Kilo Code Prompt ClineProvider.ts ClineProvider injection

MEDIUM

6.3

CVSS Score

Published: October 8, 2025 at 08:32 AM UTC

Updated: October 19, 2026 at 04:10 PM UTC

1 product affected across 1 vendorKilo Code

Using Kilo Code by N/A?

Get instant alerts when new vulnerabilities affect Kilo Code - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.3

Exploit prediction

EPSS 0.4%

SSVC

PoC

Description

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Kilo Code · Kilo Org

90%

4.0 4.1 4.10 4.11 4.12 4.13 4.14 4.15 4.16 4.17 4.18 4.19 4.2 4.20 4.21 4.22 4.23 4.24 4.25 4.26 4.27 4.28 4.29 4.3 4.30 4.31 4.32 4.33 4.34 4.35 4.36 4.37 4.38 4.39 4.4 4.40 4.41 4.42 4.43 4.44 4.45 4.46 4.47 4.48 4.49 4.5 4.50 4.51 4.52 4.53 4.54 4.55 4.56 4.57 4.58 4.59 4.6 4.60 4.61 4.62 4.63 4.64 4.65 4.66 4.67 4.68 4.69 4.7 4.70 4.71 4.72 4.73 4.74 4.75 4.76 4.77 4.78 4.79 4.8 4.80 4.81 4.82 4.83 4.84 4.85 4.86.0 4.9

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://github.com/Kilo-Org/kilocode/pull/2244/commits/2fdddf89edba41ec3a527134e485a3388c464333

References (6)

VDB EntryTechnical Description

Source: cverecord

https://vuldb.com/?id.327382

SignaturePermissions Required

Source: cverecord

https://vuldb.com/?ctiid.327382

Third Party Advisory

Source: cverecord

https://vuldb.com/?submit.667004

Exploit

Source: cverecord

https://mcpsec.dev/advisories/2025-10-02-kilo-code-ai-agent-supply-chain-attack/

Issue Tracking

Source: cverecord

https://github.com/Kilo-Org/kilocode/pull/2244

Issue TrackingPatch

Source: cverecord

https://github.com/Kilo-Org/kilocode/pull/2244/commits/2fdddf89edba41ec3a527134e485a3388c464333

SSVC — Action Prioritization

SSVCPoCNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.3MEDIUMVulDB

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-74CWE-707

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card