CVE-2025-55319 Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network

Description

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.

Affected products and versions

Product	Affected versions	Fixed in
Visual Studio Code 1.0	1.0.0 → < 1.104.0	1.104.0

Other CVEs of Visual Studio Code

The 93 CVEs of Visual Studio Code →

CVE-2026-102851 Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally 6.1 Medium CVE-2026-69370 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an… 8.8 High CVE-2026-102238 Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an… 9.6 Critical CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network 8.8 High