← All advisories

High severity7.8NVD Advisory· Published Dec 15, 2021· Updated Oct 8, 2026

CVE-2021-43891

CVE-2021-43891

Description

Visual Studio Code Remote Code Execution Vulnerability

Affected products

2

Microsoft/Visual Studio Code2 versions
cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*range: <1.63.2
- (no CPE)

Patches

Vulnerability mechanics

References

1

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43891nvdPatchVendor Advisory

News mentions

1

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
The Hacker News · Sep 2, 2026