CVE-2020-17163
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Remote code execution vulnerability in the Python extension for Visual Studio Code.
Risk Assessment
An attacker could remotely execute code in the user's context, potentially leading to data or system compromise.
Recommendation
Update the Python extension for Visual Studio Code to the latest version.
Other vulnerabilities in Visual Studio Code Python Extension
See all- CVE-2020-1171High
Remote code execution vulnerability in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker could run arbitrary code in the context of the current user.
- CVE-2026-54981High
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Original NVD description (English source)
Visual Studio Code Python Extension Remote Code Execution Vulnerability