CVE-2026-54981: Visual Studio Code Python Extension Security Feature Bypass Vulnerability
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Other sources
Visual Studio Code Python Extension Security Feature Bypass Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.132.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54981?
CVE-2026-54981 has a severity rating of high, with a score of 7.8.
What type of vulnerability is CVE-2026-54981?
CVE-2026-54981 is classified as a security feature bypass vulnerability.
Who is affected by CVE-2026-54981?
CVE-2026-54981 affects users of the Microsoft Python extension for Visual Studio Code.
How can CVE-2026-54981 be mitigated?
Mitigation for CVE-2026-54981 involves applying the latest updates and patches provided by Microsoft for the Python extension.
What could an attacker achieve by exploiting CVE-2026-54981?
An attacker exploiting CVE-2026-54981 could potentially bypass the security features locally.