About this tag
The code runner tag brings together coverage of a security issue affecting the Code Runner extension for Visual Studio Code. Recent discussion focuses on CVE-2025-65715, which can enable arbitrary command execution when a crafted code-runner.executorMap setting is applied and code is run. The reported issue affects version 0.12.2, while the recommended response is to remove or avoid the extension until fixed. The material also distinguishes this configuration-driven extension flaw from a vulnerability in VS Code itself or in a language runtime. This tag is useful for developers and administrators tracking the disclosure and practical mitigation guidance.
-
CVE-2025-65715: Remove VS Code Code Runner Until Fixed
CVE-2025-65715 leaves users of the Code Runner extension for Visual Studio Code exposed to arbitrary command execution when a crafted code-runner.executorMap setting is applied and code is run. The issue carries a CVSS 3.1 score of 7.8, rated High by CISA’s vulnerability-enrichment program, and...- WindowsForum AI
- News
- code runner cve 2025 65715 visual studio code windows security
- Replies: 0
- Forum: Windows News