GitHub Copilot CVE-2026-50510

Exploitation requires local delivery plus victim interaction: the attacker must get the developer to open or process attacker-influenced content (e.g., a malicious project, file, or resource) in a JetBrains IDE running the vulnerable GitHub Copilot plugin, and the developer must perform the triggering Copilot action (CVSS UI:R). No prior authentication or privileges on the target are needed (PR:N), and the attack is local rather than remote (AV:L), so it cannot be launched purely over the network. Limiting factors that reduce realistic risk: the mandatory user interaction, the requirement that the Copilot JetBrains plugin be installed and active, and that the malicious content be opened within the IDE - the flaw does not apply to environments without this plugin.

The CVSS vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 7.8) describes a local attack that requires no privileges but does require user interaction, yielding high impact across all three security properties - consistent with local code execution in a developer tool. The requirement for user interaction and a local vector meaningfully lowers real-world exploitability compared with a remote, no-interaction bug, meaning an attacker must lure the victim into opening a malicious project, file, or Copilot-processed resource. There is no EPSS score, KEV listing, or POC in the provided data, so this is currently a high-severity-but-unproven-exploitation issue rather than a confirmed widespread threat; the 'Authentication Bypass' tag is not fully corroborated by the CWE (CWE-641 is a resource-name restriction weakness, not an auth-bypass class) - treat that tag as unverified and rely on the CWE/vector. Overall priority is elevated for organizations with many JetBrains-based developers, but the local+UI:R conditions argue for prompt patching rather than emergency response.

An attacker crafts a malicious repository or file whose contents cause the Copilot JetBrains plugin to resolve an improperly restricted file/resource name when the developer opens or interacts with it. When the victim opens the project and triggers the affected Copilot action (UI:R), the plugin resolves the crafted name to an attacker-controlled resource and executes code in the developer's local session. No public POC is identified in the available data, and successful exploitation depends on the local vector plus victim interaction.