CVE Catalog
CVE-2026-69320
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.47%
38th percentile - higher than 38% of all known CVEs
Summary
OS command injection vulnerability in Visual Studio Code. An unauthorized attacker can execute code remotely over the network.
Risk Assessment
An attacker could take control of the system running Visual Studio Code, potentially compromising data confidentiality and integrity.
Recommendation
Apply vendor-provided updates and restrict network access to Visual Studio Code.
Original NVD description (English source)
Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.