CVE-2026-23653 PUBLISHED CVSS 5.699999809265137 MEDIUM

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.

Risk Scores

CVSS v3.1
5.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftMicrosoft Visual Studio Code CoPilot Chat Extension0.27.0
microsoftvisual_studio_code_copilot_chat_extension0.27.0

Timeline

References

…and 1 more

Open in Interactive Console →