Microsoft Github Copilot vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Github Copilot: 4 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:github_copilot
CVE-2026-50510
High · 7.8
CWE-641 Jul 14, 2026
GitHub Copilot Remote Code Execution Vulnerability
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.
CVE-2025-66389
High · 7.5
CWE-552 Jun 22, 2026
Files or Directories Accessible to External Parties in Microsoft Github Copilot
GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.
CVE-2026-21516
High · 7.8
CWE-77 Feb 10, 2026
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.
CVE-2025-64671
High · 7.8
CWE-77 Dec 9, 2025
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.