High severity7.8NVD Advisory· Published Aug 11, 2026· Updated Aug 11, 2026
CVE-2026-70335
CVE-2026-70335
Description
Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
1- Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-DaysCyber Security News · Aug 11, 2026