Known vulnerabilities in Microsoft Visual Studio Code CoPilot Chat Extension

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-65675	No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a…	7.1 High	Aug 11, 2026
CVE-2026-45482	Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio…	8.4 High	Jun 9, 2026
CVE-2026-23653	Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual…	5.7 Medium	Apr 14, 2026
CVE-2026-21523	Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to…	8.0 High	Feb 10, 2026
CVE-2026-21518	Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual…	8.8 High	Feb 10, 2026
CVE-2025-62449	Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat…	6.8 Medium	Nov 11, 2025
CVE-2025-62222	Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat…	8.8 High	Nov 11, 2025
CVE-2025-21264	Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a…	7.1 High	May 13, 2025