CVE-2026-54981
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Risk Assessment
An attacker could bypass security features, potentially leading to unauthorized access to the system or data.
Recommendation
Apply the latest updates for the Python extension for Visual Studio Code.
Other vulnerabilities in Visual Studio Code - Python extension
See all- CVE-2020-1171High
Remote code execution vulnerability in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker could run arbitrary code in the context of the current user.
- CVE-2020-17163High
Remote code execution vulnerability in the Python extension for Visual Studio Code.
Original NVD description (English source)
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS