Skip to content
OpenAdvisories
High MSRC-CVE-2025-55319 1 CVE

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Published Sep 11, 2025 · Updated Feb 20, 2026 · Revision 4

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

Security updates
1.104.0 — https://code.visualstudio.com/updates/v1_104?pubDate=20250911

Vulnerabilities 1

  • High 8.8
    CVE-2025-55319 Public exploit

    Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

    Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.

    Microsoft Visual Studio Code

Revision history

  1. #4

    Updated CWE value. This is an informational change only.

  2. #3

    Corrected Download and Article links in the Security Updates table. This is an informational change only.

  3. #2

    Added an acknowledgement. This is an informational change only.

  4. #1

    Information published.

References