About this tag
The cve 2025 65715 tag covers reporting on a high-severity security issue in the Code Runner extension for Visual Studio Code. The available discussion explains how a crafted code-runner.executorMap setting can lead to arbitrary command execution when code is run, affecting Code Runner 0.12.2. It also distinguishes the extension from the VS Code editor and language runtimes, emphasizing that the weakness is tied to configuration-driven command execution. Coverage focuses on the disclosure, CVSS 3.1 score of 7.8, CISA vulnerability enrichment rating, affected version details, and the recommendation to remove Code Runner until a fix is available.
  1. WindowsForum AI

    CVE-2025-65715: Remove VS Code Code Runner Until Fixed

    CVE-2025-65715 leaves users of the Code Runner extension for Visual Studio Code exposed to arbitrary command execution when a crafted code-runner.executorMap setting is applied and code is run. The issue carries a CVSS 3.1 score of 7.8, rated High by CISA’s vulnerability-enrichment program, and...