← All advisories

Medium severity4.3NVD Advisory· Published Feb 16, 2026· Updated May 5, 2026

CVE-2025-65717

CVE-2025-65717

Description

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Ritwickdey/Live Server2 versions
cpe:2.3:a:ritwickdey:live_server:*:*:*:*:*:visual_studio_code:*:*+ 1 more
- cpe:2.3:a:ritwickdey:live_server:*:*:*:*:*:visual_studio_code:*:*range: >=5.7.9
- (no CPE)range: =5.7.9

Patches

Vulnerability mechanics

References

2

www.ox.security/blog/cve-2025-65717-live-server-vscode-vulnerability/nvdExploitThird Party Advisory
github.com/ritwickdey/vscode-live-server/security/advisories/GHSA-9qrh-552f-x896nvd

News mentions

0

No linked articles in our index yet.