← All advisories

Unrated severityNVD Advisory· Published Nov 20, 2025· Updated Feb 26, 2026

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

CVE-2025-64660

Description

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

Affected products

2

GitHub/Copilot CLIllm-fuzzy
Microsoft/Visual Studiocpe-rescue
Range: 1.0.0

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64660mitrevendor-advisorypatch

News mentions

0

No linked articles in our index yet.