CVE-2026-49484
Code for IBM i: Temporary files are visible to all users
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Browser downloads and the edit-save flow content in the shared /tmp directory without reliable cleanup. On systems where /tmp is accessible to other local accounts, file contents remain readable after download or editing operations. This issue is fixed in version 3.0.1.
| CWE | CWE-377 CWE-459 |
| Vendor | codefori |
| Product | vscode-ibmi |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for codefori vscode-ibmi
Be the first to know when new unknown vulnerabilities affecting codefori vscode-ibmi are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
codefori / vscode-ibmi
< 3.0.1