# CVE-2025-11445

## Summary

- **CVE ID:** CVE-2025-11445
- **Severity:** MEDIUM
- **CVSS Score:** 7.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)
- **CWE:** CWE-74, CWE-707
- **Published:** Oct 8, 2025
- **Last Modified:** Mar 12, 2026

## Description

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue.

## Affected Products

- n/a — Kilo Code (4.0)
- n/a — Kilo Code (4.1)
- n/a — Kilo Code (4.2)
- n/a — Kilo Code (4.3)
- n/a — Kilo Code (4.4)
- n/a — Kilo Code (4.5)
- n/a — Kilo Code (4.6)
- n/a — Kilo Code (4.7)
- n/a — Kilo Code (4.8)
- n/a — Kilo Code (4.9)
- n/a — Kilo Code (4.10)
- n/a — Kilo Code (4.11)
- n/a — Kilo Code (4.12)
- n/a — Kilo Code (4.13)
- n/a — Kilo Code (4.14)
- n/a — Kilo Code (4.15)
- n/a — Kilo Code (4.16)
- n/a — Kilo Code (4.17)
- n/a — Kilo Code (4.18)
- n/a — Kilo Code (4.19)
- n/a — Kilo Code (4.20)
- n/a — Kilo Code (4.21)
- n/a — Kilo Code (4.22)
- n/a — Kilo Code (4.23)
- n/a — Kilo Code (4.24)
- n/a — Kilo Code (4.25)
- n/a — Kilo Code (4.26)
- n/a — Kilo Code (4.27)
- n/a — Kilo Code (4.28)
- n/a — Kilo Code (4.29)
- n/a — Kilo Code (4.30)
- n/a — Kilo Code (4.31)
- n/a — Kilo Code (4.32)
- n/a — Kilo Code (4.33)
- n/a — Kilo Code (4.34)
- n/a — Kilo Code (4.35)
- n/a — Kilo Code (4.36)
- n/a — Kilo Code (4.37)
- n/a — Kilo Code (4.38)
- n/a — Kilo Code (4.39)
- n/a — Kilo Code (4.40)
- n/a — Kilo Code (4.41)
- n/a — Kilo Code (4.42)
- n/a — Kilo Code (4.43)
- n/a — Kilo Code (4.44)
- n/a — Kilo Code (4.45)
- n/a — Kilo Code (4.46)
- n/a — Kilo Code (4.47)
- n/a — Kilo Code (4.48)
- n/a — Kilo Code (4.49)
- n/a — Kilo Code (4.50)
- n/a — Kilo Code (4.51)
- n/a — Kilo Code (4.52)
- n/a — Kilo Code (4.53)
- n/a — Kilo Code (4.54)
- n/a — Kilo Code (4.55)
- n/a — Kilo Code (4.56)
- n/a — Kilo Code (4.57)
- n/a — Kilo Code (4.58)
- n/a — Kilo Code (4.59)
- n/a — Kilo Code (4.60)
- n/a — Kilo Code (4.61)
- n/a — Kilo Code (4.62)
- n/a — Kilo Code (4.63)
- n/a — Kilo Code (4.64)
- n/a — Kilo Code (4.65)
- n/a — Kilo Code (4.66)
- n/a — Kilo Code (4.67)
- n/a — Kilo Code (4.68)
- n/a — Kilo Code (4.69)
- n/a — Kilo Code (4.70)
- n/a — Kilo Code (4.71)
- n/a — Kilo Code (4.72)
- n/a — Kilo Code (4.73)
- n/a — Kilo Code (4.74)
- n/a — Kilo Code (4.75)
- n/a — Kilo Code (4.76)
- n/a — Kilo Code (4.77)
- n/a — Kilo Code (4.78)
- n/a — Kilo Code (4.79)
- n/a — Kilo Code (4.80)
- n/a — Kilo Code (4.81)
- n/a — Kilo Code (4.82)
- n/a — Kilo Code (4.83)
- n/a — Kilo Code (4.84)
- n/a — Kilo Code (4.85)
- n/a — Kilo Code (4.86.0)

## References

- [CNA](https://vuldb.com/?id.327382)
- [CNA](https://vuldb.com/?ctiid.327382)
- [CNA](https://vuldb.com/?submit.667004)
- [CNA](https://mcpsec.dev/advisories/2025-10-02-kilo-code-ai-agent-supply-chain-attack/)
- [CNA](https://github.com/Kilo-Org/kilocode/pull/2244)
- [CNA](https://github.com/Kilo-Org/kilocode/pull/2244/commits/2fdddf89edba41ec3a527134e485a3388c464333)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.32%
- **EPSS Percentile:** 24.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-09._