EUVD-2026-56589
GHSA-29cx-mh6p-wj36
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable injection requiring victim to open malicious content (UI:R, PR:N); full triad impact limited to user session scope (S:U).
Primary rating from Vendor (microsoft).
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in Microsoft Visual Studio Code allows a network-based attacker to inject and execute arbitrary code on a victim's machine with no prior authentication, provided the victim performs a user interaction - such as opening a malicious workspace, file, or URI. Classified under CWE-94 (Code Injection), the vulnerability carries a CVSS base score of 8.8, reflecting high impact across confidentiality, integrity, and availability. No public exploit code or CISA KEV listing was identified at the time of analysis, but the attack complexity is rated Low, making reliable exploitation straightforward once a victim is lured.
Technical ContextAI
CWE-94 (Improper Control of Generation of Code - Code Injection) describes a class of vulnerabilities where user-controlled input is passed to a code generation or evaluation mechanism without adequate sanitization, allowing an attacker to inject executable logic. Visual Studio Code is Microsoft's Electron-based cross-platform IDE, which hosts a Node.js runtime, a built-in extension engine, and numerous embedded interpreters and language servers. Attack surface candidates for code injection in VS Code historically include workspace trust bypass, malicious .code-workspace files, settings injection, or extensions that evaluate untrusted input. The CVSS vector (AV:N/AC:L/PR:N/UI:R) indicates the injection path is reachable over the network with low complexity but requires the victim to take an action, consistent with opening a crafted file, repository, or remote workspace. The NVD CPE for affected versions was not provided in the available data; version ranges should be confirmed against the Microsoft MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70336.
RemediationAI
The primary remediation is to apply the Microsoft-released patch referenced in the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70336. Users should update Visual Studio Code to the patched version specified in that advisory; an exact fix version number was not available in the data provided and must be confirmed from the MSRC page. As a compensating control pending patching, organizations should enable and enforce VS Code's Workspace Trust feature, which prompts users before executing workspace-level code, and configure it to default to Restricted mode for all unknown workspaces - this directly limits the code injection surface but does not eliminate it. Additionally, blocking VS Code's access to arbitrary external URIs and remote workspaces via network policy reduces the network-reachable attack surface. Developers should be advised not to open repositories or workspace files from untrusted or unverified sources until patched.
More in Visual Studio Code
View allVisual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authent
Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely e
Security-feature bypass in Microsoft Visual Studio Code before 1.136.2 lets a remote, unauthenticated attacker defeat a
Privilege escalation in Microsoft Visual Studio Code allows remote unauthenticated attackers to elevate privileges over
Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authent
Security-feature bypass in Microsoft Visual Studio Code lets a remote attacker deliver functionality from an untrusted c
Remote code execution in Visual Studio Code (versions 1.0.0 through 1.132.0) is enabled by a missing authorization check
Authorization bypass in Visual Studio Code versions 1.0.0 through 1.136.1 allows an unauthenticated network attacker to
OS command injection in Visual Studio Code exposes victims to remote code execution when they interact with attacker-con
Security-feature bypass in GitHub Copilot and Visual Studio (affecting Visual Studio Code builds before 1.119.1) lets a
Privilege elevation in Microsoft Visual Studio Code (all releases from 1.0.0 up to but not including 1.119.1) stems from
Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attac
Same weakness CWE-94 – Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today