No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 5
- CwesCWE-862 → CWE-862, CWE-284NVD modified 2026-10-23 19:10
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-23 19:10
- StatusPublished → ModifiedNVD modified 2026-10-23 19:10
- CVSS7.1 (v3.1, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C) → 6.5 (v3.1, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)NVD modified 2026-10-23 19:10
- First seenCVSS 7.1 · microsoftNVD modified 2026-10-21 20:52
Affected (CPE criteria) 1
cpe:2.3:a:microsoft:github_copilot_chat:-:*:*:*:*:visual_studio_code:*:*