CVE-2026-81381: GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Other sources
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.136.2
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over a network and does not require privileges. Exploitation requires user interaction.
What is the likely security impact?
Successful exploitation can disclose information, including potentially sensitive data. The available vector indicates no integrity or availability impact.
Is Visual Studio Code affected?
Microsoft Visual Studio Code is identified as affected in connection with GitHub Copilot. No affected version range or configuration details are provided.