7.8
High
CVE-2026-54981 Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized…
Description
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Python extension for Visual Studio Code 2020 | 2020 → < 2026.3.1 | 2026.3.1 |
References
- Visual Studio Code Python Extension Security Feature Bypass Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Python extension for Visual Studio Code
The 6 CVEs of Python extension for Visual Studio Code →
CVE-2025-49714
Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code…
7.8
High
CVE-2024-49050
Visual Studio Code Python Extension Remote Code Execution Vulnerability
8.8
High
CVE-2020-17163
Visual Studio Code Python Extension Remote Code Execution Vulnerability
7.8
High
CVE-2020-16977
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook…
7.0
High