MSRC-CVE-2026-119982 — Visual Studio Code Security Feature Bypass Vulnerability

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What security feature could be bypassed by successfully exploiting this vulnerability?
An attacker could supply specially crafted content that a user processes with inline chat in Visual Studio Code. Successful exploitation could allow modifications to other workspace files without the expected authorization or confirmation, bypassing the restriction that limits edits to the active document.

Security updates
1.145.3 — https://code.visualstudio.com/updates/v1_145

Vulnerabilities 1

Medium 6.5

CVE-2026-119982

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Microsoft Visual Studio Code

Nov 10, 2026

Revision history

2026-11-10 #1
Information published.

References

CVE-2026-119982 Visual Studio Code Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119982
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss