CVE-2025-65715

An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace.

Score

CVSS 3.1 7.8 High

Status

Analyzed - cve@mitre.org

Published

2026-02-16

Last modified

2026-02-18

Weaknesses

CWE-94

Affected products

• Coderunner (Formulahendry)

References

• https://github.com/formulahendry/vscode-code-runner
• https://www.ox.security/blog/cve-2025-65715-code-runner-vscode-rce/