Description
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | GitHub Copilot Plugin for JetBrains IDEs | 1.0.0 – < 1.17.0-251 | 1.17.0-251 |
Advisories 1
- MSRC-CVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure Vulnerability Microsoft Security Response Center · Nov 10, 2026
References
- GitHub Copilot for Jetbrains Information Disclosure Vulnerability vendor-advisory patch