Security Feature Bypass in Visual Studio Code CoPilot Chat Extension by Microsoft
CVE-2026-65675

7.1HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Visual Studio Code Copilot Chat Extension
Vendor
CVE Published:
11 August 2026

What is CVE-2026-65675?

The CoPilot Chat Extension for Visual Studio Code exposes a vulnerability that allows unauthorized attackers to bypass important security features over a network. This weakness could potentially lead to unauthorized access and manipulation of sensitive data, making it crucial for users to apply the recommended patches and updates to secure their systems and maintain confidentiality.

Affected Version(s)

Microsoft Visual Studio Code CoPilot Chat Extension 0.27.0 < 1.132.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.