EUVD-2026-56561
GHSA-5948-chc9-3jrw
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-exploitable with no attacker privileges, but requires victim to open malicious content (UI:R); full OS command execution yields high CIA impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
AnalysisAI
OS command injection in Visual Studio Code exposes victims to remote code execution when they interact with attacker-controlled content, such as a malicious workspace, repository, or file. The vulnerability (CWE-78) stems from improper neutralization of shell metacharacters in input passed to OS-level command execution routines, giving an unauthenticated network attacker the ability to run arbitrary commands with the privileges of the VS Code process. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | User interaction is required (UI:R per CVSS vector): a victim must open or interact with attacker-controlled content within VS Code, such as a malicious workspace folder, repository, or configuration file. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score is well-supported by the vector: network-exploitable (AV:N), low complexity (AC:L), no attacker privileges required (PR:N), and full CIA impact (C:H/I:H/A:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts or contributes a malicious repository containing a crafted VS Code workspace configuration file (e.g., .vscode/tasks.json or settings.json) with embedded shell metacharacters in a field that VS Code passes unsanitized to the OS command interpreter. When a developer clones and opens the repository in VS Code, the injected OS commands execute automatically or upon the first build/task trigger, granting the attacker code execution with the developer's OS privileges. … |
| Remediation | The primary remediation is to apply any patch or updated release of Visual Studio Code identified in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69320. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Visual Studio Code installations and identify which teams rely on it daily-this timeline is viable given no active exploitation has been reported. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Visual Studio Code
View allVisual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authent
Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely e
Privilege escalation in Microsoft Visual Studio Code allows remote unauthenticated attackers to elevate privileges over
Security-feature bypass in Microsoft Visual Studio Code lets a remote attacker deliver functionality from an untrusted c
Remote code execution in Visual Studio Code (versions 1.0.0 through 1.132.0) is enabled by a missing authorization check
Remote code execution in Microsoft Visual Studio Code allows a network-based attacker to inject and execute arbitrary co
Security-feature bypass in GitHub Copilot and Visual Studio (affecting Visual Studio Code builds before 1.119.1) lets a
Privilege elevation in Microsoft Visual Studio Code (all releases from 1.0.0 up to but not including 1.119.1) stems from
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attac
Local code execution in Microsoft Visual Studio Code stems from a command injection flaw (CWE-77) that lets an attacker
Security feature bypass via path traversal in GitHub Copilot and Visual Studio Code allows a local unauthorized attacker
Fail-open security logic in Visual Studio Code permits network-based security feature bypass by an unauthenticated attac
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today