6.5 Medium

CVE-2026-50519 Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized…

Description

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
GitHub Copilot Chat 1.0	1.0.0 → < 1.123.2	1.123.2

References

Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability msrc.microsoft.com

Timeline

Published June 19, 2026
Last modified September 24, 2026

Track this CVE