CVE Catalog
CVE-2026-65675
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.48%
39th percentile - higher than 39% of all known CVEs
Summary
The CoPilot Chat extension in Visual Studio Code contains a vulnerability that allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
An attacker can bypass security controls and gain unauthorized access to extension features, potentially leading to data confidentiality or integrity breaches.
Recommendation
Update the Visual Studio Code CoPilot Chat extension to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.