Skip to content
OpenAdvisories

Product · Microsoft

Microsoft Visual Studio Code CoPilot Chat Extension

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-23653

    GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.

    Microsoft Microsoft Visual Studio Code CoPilot Chat Extension
  • Medium 6.8
    CVE-2025-62449

    Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally.

    Microsoft Microsoft Visual Studio Code CoPilot Chat Extension