Skip to content
Sign in
8.4 High

CVE-2025-64671 Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized…

Description

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.

Affected products and versions

Product Affected versions Fixed in
GitHub Copilot Plugin for JetBrains IDEs 1.0 1.0.0 → < 1.5.60-243 1.5.60-243

Other CVEs of GitHub Copilot Plugin for JetBrains IDEs

The 3 CVEs of GitHub Copilot Plugin for JetBrains IDEs →
CVE-2026-50510 Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute… 7.8 High CVE-2026-21516 Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an… 8.8 High
Track this CVE