EUVD-2026-56437
GHSA-pgm3-v47m-2q8v
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Network delivery with no auth and low complexity confirmed; UI:R reflects mandatory victim interaction; I:H for security bypass enabling unauthorized modifications; C:N as no data disclosure is indicated.
Primary rating from Vendor (microsoft).
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
AnalysisAI
Security feature bypass in Microsoft Visual Studio Code Copilot Chat Extension (versions 0.27.0 through pre-1.132.1) enables network-based attackers to circumvent a protective control without authentication, resulting in high integrity impact and low availability impact. The attack requires user interaction - consistent with a scenario where a victim must engage with crafted content delivered over the network. No public exploit code has been identified at time of analysis, and a vendor patch (1.132.1) is available via the Microsoft Security Response Center.
Technical ContextAI
The Microsoft Visual Studio Code Copilot Chat Extension is an AI-powered developer assistant deeply integrated into VS Code, widely deployed across enterprise and individual developer environments. The vulnerability class is a security feature bypass (tagged as 'Authentication Bypass'), meaning an existing protective mechanism - likely an authorization, content-filtering, or policy-enforcement check within the extension's network communication or prompt-handling layer - can be circumvented by a remote, unauthenticated actor. No CWE has been assigned by NVD, which limits root-cause classification; the absence of a CWE likely indicates the advisory is recent or the mechanism is still under investigation. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L) confirms network delivery, low attack complexity, no privilege requirements, and user interaction as the trigger. The high integrity rating and zero confidentiality impact suggest the bypass enables unauthorized writes, modifications, or policy violations rather than data exfiltration.
RemediationAI
Update the Visual Studio Code Copilot Chat Extension to version 1.132.1 or later, which contains the vendor-released patch per the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65675. Users can update directly from the VS Code Extensions marketplace. As an interim workaround for environments unable to update immediately, disabling the Copilot Chat Extension entirely removes the attack surface - this can be done via VS Code's Extensions panel or via enterprise policy management. Note that disabling the extension eliminates all Copilot Chat functionality. There are no known partial compensating controls that preserve extension functionality while mitigating the bypass; full patching is the recommended approach.
More in Github Copilot Chat
View allInformation disclosure in GitHub Copilot Chat for Visual Studio Code (versions 1.0.0 up to but not including 1.123.2) le
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extens
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat E
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today