Threat database

A vulnerability in the codefori vscode-ibmi Visual Studio Code extension prior to version 3.0.1 allows insecure handling of temporary files. Specifically, Object Browser downloads and edit-save flow content are stored in the shared /tmp directory without reliable cleanup, potentially exposing file contents to other local users on the system. This issue is resolved in version 3.0.1.

CVE-2026-49483 is a high-severity vulnerability in the codefori vscode-ibmi Visual Studio Code extension prior to version 3.0.1. The issue involves incorrect permission assignment for IBMi components, allowing local accounts to alter programs due to broad public permissions and insufficient integrity verification. The vulnerability is fixed in version 3.0.1.