CVE Catalog
CVE-2026-54981
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.44%
37th percentile - higher than 37% of all known CVEs
Summary
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Risk Assessment
An attacker could bypass security features, potentially leading to unauthorized access to the system or data.
Recommendation
Apply the latest updates for the Python extension for Visual Studio Code.
Original NVD description (English source)
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.