CVE-2026-70335 | Microsoft GitHub Copilot/Visual Studio Code up to 1.132.0 os command injection (EUVD-2026-56588 / WID-SEC-2026-2761)
A vulnerability was found in Microsoft GitHub Copilot and Visual Studio Code up to 1.132.0. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation results in os command injection.
This vulnerability is reported as CVE-2026-70335. The attack requires a local approach. No exploit exists.
Upgrading the affected component is advised.