5.0
Medium
CVE-2025-62453 Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to…
Description
Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Visual Studio Code 1.0 | 1.0.0 → < 1.105.0 | 1.105.0 |
References
- GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Visual Studio Code
The 93 CVEs of Visual Studio Code →
CVE-2026-102851
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally
6.1
Medium
CVE-2026-69370
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an…
8.8
High
CVE-2026-102238
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an…
9.6
Critical
CVE-2026-70098
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network
8.8
High