CVE-2026-70335

HighCVSS 7.8

Published: 11/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

39th percentile - higher than 39% of all known CVEs

Summary

An OS command injection vulnerability in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Risk Assessment

An attacker can execute system commands with elevated privileges, potentially leading to full system compromise.

Recommendation

Update GitHub Copilot and Visual Studio Code to the latest versions with security fixes.

Original NVD description (English source)

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.