High severity · published Feb 10, 2026
CVE-2026-21518
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
8.8
CVSS
1.5%
EPSS
No
On KEV
Description
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MV
Microsoft Visual Studio Code CoPilot Chat Extension · Microsoft
0.27.0 before 0.37.1 · source: vendor
VS
Visual Studio Code · Microsoft
1.0.0 before 1.110.1 · source: vendor, NVD
In the news
VulnerabilityHigh
ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target open a malicious project. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-21518.
Apr 2, 2026·Zero Day Initiative
Affected product
MV
Microsoft Visual Studio Code CoPilot Chat Extension
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-21518
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-21518
Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518
More from Microsoft Visual Studio Code CoPilot Chat Extension
8.4
CVE-2026-45482
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
8.0
CVE-2026-21523
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
6.5
CVE-2026-65675
CoPilot Chat Security Feature Bypass Vulnerability
6.5
CVE-2026-23653
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability