CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
Posted: Tue Jun 09, 2026 3:00 pm
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Source: https://msrc.microsoft.com/update-guide ... 2026-45482
Source: https://msrc.microsoft.com/update-guide ... 2026-45482