← All advisories

High severity7.8NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026

CVE-2025-49714

CVE-2025-49714

Description

Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.

Affected products

2

Microsoft/Visual Studio Code Python Extensionllm-fuzzy
Microsoft/Visual Studio Code CoPilot Chat Extensioncpe-rescue
Range: 2020

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49714nvdVendor Advisory

News mentions

0

No linked articles in our index yet.