Microsoft Github Copilot Chat vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Github Copilot Chat: 5 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:github_copilot_chat

CVE-2026-65675 Medium · 6.5 CWE-862 Aug 11, 2026

Missing Authorization in Microsoft Github Copilot Chat

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-50519 High · 7.5 CWE-1188 Jun 19, 2026

Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVE-2026-23653 Medium · 6.5 CWE-77 Apr 14, 2026

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.

CVE-2025-62449 Medium · 6.8 CWE-22 Nov 11, 2025

Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally.

CVE-2025-62222 High · 8.8 CWE-77 Nov 11, 2025

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.