Unrated

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized at...

CVE-2026-21518 First seen on SecPulse Feb 11, 03:16

Original description The description as published by the source.

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory msrc.microsoft.com

Key facts

Severity: Unrated
Published: Feb 11, 2026
First seen on SecPulse: Feb 11, 03:16

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 21:03