Two vulnerabilities in GitHub Copilot and Visual Studio Code allow attackers to disclose information over a network through command injection and insufficiently protected credentials.
Disclosed 8 September 2026 · Record updated 1 October 2026
Unauthorized attackers can disclose information over a network through command injection or credential exposure vulnerabilities.
VulnerabilitiesMicrosoft's coding assistant and editor carry flaws that let an unauthorised attacker disclose information over a network, according to entries published by the US vulnerability database.
14 Sept 2026
