Skip to content
Sign in
8.8 High

CVE-2026-21516 Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an…

Description

Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.

Affected products and versions

Product Affected versions Fixed in
GitHub Copilot Plugin for JetBrains IDEs 1.0 1.0.0 → < 1.5.63 1.5.63

Other CVEs of GitHub Copilot Plugin for JetBrains IDEs

The 3 CVEs of GitHub Copilot Plugin for JetBrains IDEs →
CVE-2026-50510 Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute… 7.8 High CVE-2025-64671 Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized… 8.4 High
Track this CVE