A vulnerability marked as problematic has been reported in Microsoft Visual Studio Code CoPilot Chat Extension. Affected is an unknown function. The manipulation leads to command injection.
This vulnerability is traded as CVE-2026-23653. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-23653 | Microsoft Visual Studio Code CoPilot Chat Extension prior 0.37.3 command injection
A vulnerability marked as problematic has been reported in Microsoft Visual Studio Code CoPilot Chat Extension. Affected is an unknown function. The manipulation leads to command injection. This vulnerability is traded as CVE-2026-23653.…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR