Description
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | GitHub Copilot Chat | 1.0.0 – < 1.123.2 | 1.123.2 |
Advisories 1
- MSRC-CVE-2026-50519 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability Microsoft Security Response Center · Jun 9, 2026
References
- Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability vendor-advisory patch