{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21518", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2025-12-30T18:10:54.845Z", "datePublished": "2026-02-10T17:51:15.121Z", "dateUpdated": "2026-05-11T21:25:51.574Z"}, "containers": {"cna": {"title": "GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability", "datePublic": "2026-02-10T16:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.0.0", "versionEndExcluding": "1.110.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:visual_studio_code_copilot_chat_extension:*:*:*:*:*:*:*:*", "versionStartIncluding": "0.27.0", "versionEndExcluding": "0.37.1"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio Code CoPilot Chat Extension", "versions": [{"version": "0.27.0", "lessThan": "0.37.1", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Visual Studio Code", "versions": [{"version": "1.0.0", "lessThan": "1.110.1", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "lang": "en-US", "type": "CWE", "cweId": "CWE-77"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-05-11T21:25:51.574Z"}, "references": [{"name": "GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability", "tags": ["vendor-advisory", "patch"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21518", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-11T04:55:50.561747Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T15:04:06.620Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21518", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-11T04:55:50.561747Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T15:43:48.047Z"}}], "cna": {"title": "GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio Code CoPilot Chat Extension", "versions": [{"status": "affected", "version": "0.27.0", "lessThan": "0.37.1", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Visual Studio Code", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.110.1", "versionType": "custom"}]}], "datePublic": "2026-02-10T16:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518", "name": "GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en-US", "value": "Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "1.110.1", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:a:microsoft:visual_studio_code_copilot_chat_extension:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "0.37.1", "versionStartIncluding": "0.27.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-05-11T18:10:34.260Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21518", "state": "PUBLISHED", "dateUpdated": "2026-05-11T18:10:34.260Z", "dateReserved": "2025-12-30T18:10:54.845Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2026-02-10T17:51:15.121Z", "assignerShortName": "microsoft"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:-:*:*", "matchCriteriaId": "F9D09E0D-DA79-4992-848B-EFF81DBD4099", "versionEndExcluding": "1.109.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network."}], "id": "CVE-2026-21518", "lastModified": "2026-02-23T17:23:27.390", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "secure@microsoft.com", "type": "Primary"}]}, "published": "2026-02-10T18:16:34.263", "references": [{"source": "secure@microsoft.com", "tags": ["Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "secure@microsoft.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.109.2)"}}], "product": "visual_studio_code", "vendor": "microsoft"}], "analysis": {"en": {"generated_at": "2026-04-15T16:37:23.173036+00:00", "value": {"mitigation_remediation": ["Install the latest security update for Visual Studio Code and the Copilot Chat Extension", "If the update cannot be applied immediately, temporarily disable or uninstall the Copilot Chat Extension until a patched version is available", "Monitor application logs for unexpected command execution attempts and consider blocking suspicious traffic at the network perimeter"], "summary": {"action": "Apply Patch", "impact": "Command Injection (Security Feature Bypass)"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Microsoft Visual Studio Code and the Copilot Chat Extension for Visual Studio Code. All installations of either component are potentially susceptible, regardless of the operating system, provided they are running a version before the patch that fixes the command injection flaw.", "description_and_impact": "An improper neutralization of special elements used in a command allows an attacker to execute arbitrary commands through GitHub Copilot and Visual Studio Code. This command injection flaw can be used to bypass a built\u2011in security feature over a network, enabling the attacker to gain unauthorized control or execute malicious code. The weakness is classified as CWE\u201177.", "risk_and_exploitability": "The CVSS score of 8.8 indicates a high severity, and the EPSS score of less than 1% suggests a low probability of widespread exploitation at present. The vulnerability is not listed in CISA's KEV catalog. Attackers would likely send crafted payloads over the network to the affected Visual Studio Code instance; the exact attack vector must be inferred from the description, as it is not explicitly detailed in the advisory."}}}}, "created": "2026-02-10T21:33:48.158987+00:00", "updated": "2026-04-15T17:45:10.847146+00:00", "vendors": ["microsoft", "microsoft$PRODUCT$visual_studio_code"]}