CVE-2026-23653
MediumCVSS 5.7Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
GitHub Copilot and Visual Studio Code contain improper neutralization of special elements used in a command (command injection). An authorized attacker could exploit this to disclose information over a network.
Risk Assessment
An authorized attacker could cause information leakage beyond trust boundaries, potentially compromising data confidentiality in the development environment. The risk affects organizations using these tools.
Recommendation
Apply the update for GitHub Copilot and Visual Studio Code provided by the vendor. Restrict extension privileges and verify trusted sources in the development environment.
Other vulnerabilities in GitHub Copilot
See all- CVE-2026-81380Medium
Command injection vulnerability in GitHub Copilot and Visual Studio Code. An unauthorized attacker can disclose information over a network.
- CVE-2026-70335High
An OS command injection vulnerability in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-50510High
Improper restriction of names for files and other resources in GitHub Copilot allows an unauthorized attacker to execute code locally.
- CVE-2026-47282Medium
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allow an unauthorized attacker to disclose information over a network.
- CVE-2025-66389High
A vulnerability in GitHub Copilot 1.372.0 allows filesystem access outside the workspace folder without user approval via a file-handler URI parameter in fetch_webpage. This could lead to data exfiltration if combined with indirect prompt injection.
- CVE-2026-50519Medium
The vulnerability in GitHub Copilot and Visual Studio Code is caused by initializing a resource with an insecure default, allowing an unauthorized attacker to disclose information over a network.
- CVE-2026-45482High
A path traversal vulnerability in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-41109High
An injection vulnerability in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over the network due to improper neutralization of special elements in output used by a downstream component.
- CVE-2025-64660High
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
- CVE-2025-62453Medium
Improper validation of generative AI output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS