{"data":{"id":"35890d16-f1e8-4d43-a730-23bee61a8c3f","title":"CVE-2025-11445: A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file…","summary":"CVE-2025-11445 affects Kilo Code up to 4.86.0, specifically the function ClineProvider in src/core/webview/ClineProvider.ts within the Prompt Handler component. Manipulation there results in injection, and the attack can be initiated remotely. The exploit is publicly available and may be used.","solution":"Applying a patch is the recommended action to fix this issue.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-11445","publishedAt":"2025-10-08T09:15:33.013Z","cveId":"CVE-2025-11445","cweIds":["CWE-74","CWE-707"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Kilo Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Kilo Code ClineProvider prompt handler injection","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00393,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-c934-4h55-jp45"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T12:08:39.181Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}