Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

RCE in VSCode Copilot Chat

hacktron.ai | vulnerability | #rce | #prompt-injection | #vscode | #copilot | #agent-mode | #codespace

Summary

VSCode Copilot agent mode is vulnerable to prompt injection: a maintainer clicking 'code with agent mode' on a crafted issue makes Copilot open a codespace and auto-run the issue text.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Understanding Indirect Prompt Injection Attacks in LLM-Integrated Workflows
Indirect prompt injection hides malicious instructions in content LLMs later read—email footers, PDFs, web pages. Real Microsoft 365 Copilot attacks make defense in depth and AI monitoring essential.
vulnerability · hacktron.ai
CVE-2021-43908: Remote code execution in VSCode restricted mode
This research chains origin leaks, CSP bypasses, and flawed webview message handlers to gain remote code execution in Visual Studio Code even with Restricted Mode enabled.
vulnerability · bishopfox.com
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
CVE-2026-28326 is an unauthenticated RCE in SolarWinds ARM where a hardcoded shared secret on TCP 55555 leads to SYSTEM-level code execution. Patch now.
vulnerability · blog.trailofbits.com
Escaping misconfigured VSCode extensions
Part one of the series: three vulnerabilities in Microsoft's SARIF Viewer and Live Preview VSCode extensions enabling local file theft, plus the $7,500-bounty CVE-2022-41042 mitigation bypass.
High · vulnerability · github.com
WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)
While remote code execution depends on runtime prerequisites like PEAR, the unauthenticated LFI primitive resides directly in WordPress Core and affects all major branches from 4.7.0 through 7.1.1.
vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
back