EUVD-2026-56306
GHSA-576p-g2qh-236v
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Network delivery with mandatory victim interaction; attacker needs no privileges; impact is confidentiality-only with no integrity or availability consequence.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
AnalysisAI
Command injection in Visual Studio Code versions prior to 1.132.1 enables remote unauthenticated attackers to disclose sensitive information from a victim's system over a network. Exploitation requires user interaction - the victim must open or engage with attacker-controlled content such as a malicious workspace, configuration file, or repository - consistent with the CVSS UI:R metric. No public exploit code or CISA KEV listing is identified at time of analysis; a vendor-released patch (1.132.1) is available via the Microsoft Security Response Center.
Technical ContextAI
Visual Studio Code is a cross-platform source code editor developed by Microsoft, with deep integration of workspace configurations, extension APIs, task runners, and terminal subsystems. The root cause is CWE-77 (Improper Neutralization of Special Elements used in a Command), a command injection class in which attacker-controlled input is embedded into a command string without adequate sanitization, allowing injection of additional shell or subprocess commands. In VS Code's architecture, this commonly manifests in features that invoke external processes using workspace-supplied data - such as task configurations (tasks.json), launch configurations, or extension-provided shell integration - where insufficient escaping permits command injection. Affected versions span Visual Studio Code 1.0.0 through 1.132.0, as derived from the EUVD version range (< 1.132.1).
RemediationAI
Upgrade Visual Studio Code to version 1.132.1 or later, which contains the vendor-released patch. The authoritative advisory and update guidance is available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47285. As a compensating control prior to patching, users should leverage VS Code's Workspace Trust feature to restrict untrusted workspaces from executing tasks, launch configurations, or extensions automatically - enabling restricted mode for unknown or externally sourced workspaces will prevent automatic execution of injected commands, though it may disable some workspace-level functionality. Users should also avoid opening repositories or workspace folders from untrusted or unknown sources. Restricting the VS Code integrated terminal's ability to run workspace-defined tasks in sensitive environments provides an additional layer of defense. Note that overly aggressive workspace trust policies may impede developer productivity.
More in Visual Studio Code
View allVisual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authent
Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely e
Privilege escalation in Microsoft Visual Studio Code allows remote unauthenticated attackers to elevate privileges over
Security-feature bypass in Microsoft Visual Studio Code lets a remote attacker deliver functionality from an untrusted c
Remote code execution in Visual Studio Code (versions 1.0.0 through 1.132.0) is enabled by a missing authorization check
Remote code execution in Microsoft Visual Studio Code allows a network-based attacker to inject and execute arbitrary co
OS command injection in Visual Studio Code exposes victims to remote code execution when they interact with attacker-con
Security-feature bypass in GitHub Copilot and Visual Studio (affecting Visual Studio Code builds before 1.119.1) lets a
Privilege elevation in Microsoft Visual Studio Code (all releases from 1.0.0 up to but not including 1.119.1) stems from
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attac
Local code execution in Microsoft Visual Studio Code stems from a command injection flaw (CWE-77) that lets an attacker
Security feature bypass via path traversal in GitHub Copilot and Visual Studio Code allows a local unauthorized attacker
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today