CVE Catalog
CVE-2026-47285
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk0.89%
56th percentile - higher than 56% of all known CVEs
Summary
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Risk Assessment
The risk of sensitive data leakage due to remote command execution by an unauthorized attacker.
Recommendation
Update Visual Studio Code to the latest version and avoid opening untrusted projects.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.