CVE-2026-102232: Visual Studio Code Security Feature Bypass Vulnerability
Published Oct 13, 2026
·Updated
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Other sources
Visual Studio Code Security Feature Bypass Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Visual Studio Code
Microsoft Visual Studio Code<1.141.1
1.141.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.141.1
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
DescriptionSeverity
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
Exploitation requires local access. The attacker does not need privileges before exploitation, but the attack complexity is rated high.
2
Is user interaction required?
Yes. The vulnerability requires user interaction for exploitation.
3
What could be affected if exploitation succeeds?
The supplied severity vector indicates high potential impact to confidentiality, integrity, and availability.