CVE Catalog

CVE-2026-69306

HighCVSS 8.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

34th percentile - higher than 34% of all known CVEs

Summary

Failing open vulnerability in Visual Studio Code. An unauthorized attacker can bypass a security feature over the network.

Risk Assessment

Bypassing security controls may allow an attacker to access protected resources or functions without authorization.

Recommendation

Install the latest security patches and configure Visual Studio Code to fail closed by default.

Original NVD description (English source)

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS