EUVD-2026-38089
GHSA-2gq4-362c-56w9
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Insecure default exposes a network-reachable resource needing no auth or interaction (AV:N/AC:L/PR:N/UI:N); impact is confidentiality-only disclosure (C:H/I:N/A:N).
Primary rating from Vendor (microsoft).
CVSS VectorNVD
Lifecycle Timeline
7DescriptionNVD
Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
AnalysisAI
Information disclosure in GitHub Copilot Chat for Visual Studio Code (versions 1.0.0 up to but not including 1.123.2) lets a remote, unauthenticated attacker read sensitive data over a network because an insecure default configuration exposes a resource that should be protected. The CVSS 3.1 score of 7.5 reflects high confidentiality impact with no integrity or availability effect. There is no public exploit identified at time of analysis and EPSS exploitation probability is low at 0.53% (40th percentile).
Technical ContextAI
The affected component is the GitHub Copilot Chat extension running inside the Visual Studio Code editor, an AI-assisted coding assistant from Microsoft (CPE cpe:2.3:a:microsoft:github_copilot_chat:*:*:*:*:*:visual_studio_code:*:*). The root cause is CWE-1188, Initialization of a Resource with an Insecure Default, meaning a resource (such as a local service endpoint, session token store, or chat data channel) ships with a default setting that does not adequately restrict access. When the extension initializes this resource with the weak default, data intended to be private becomes reachable, which is consistent with the Information Disclosure tag and the C:H/I:N/A:N impact profile.
RemediationAI
Vendor-released patch: GitHub Copilot Chat 1.123.2 - upgrade the extension to 1.123.2 or later, which falls outside the affected '<1.123.2' range; in Visual Studio Code this is done through the Extensions pane or by enabling automatic extension updates so the fix rolls out across endpoints. Consult the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50519 for definitive fixed-version guidance. As a compensating control until updated, disable or unload the Copilot Chat extension on sensitive workstations, and where the insecure default exposes a network-listening resource, restrict outbound/inbound access to the developer machine via host firewall so the exposed endpoint is not reachable from untrusted networks; the trade-off is loss of Copilot Chat functionality and possible disruption to AI-assisted workflows while disabled.
More in Github Copilot Chat
View allSecurity feature bypass in Microsoft Visual Studio Code Copilot Chat Extension (versions 0.27.0 through pre-1.132.1) ena
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extens
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat E
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today