Agentic AI and Visual Studio Code Command Injection Vulnerability Allowing Remote Code Execution
Vulnerability
A command injection vulnerability has been identified in Agentic AI and Visual Studio Code, allowing unauthorized attackers to execute code remotely. This issue arises from AI command injection, which can be exploited over a network.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected system.
Remediation
Users can download the security update for Visual Studio Code from the Visual Studio Code download page. Instructions for applying the update are available in the release notes for version 1.104.0.
Added: Sep 12, 2025, 2:20 AM
Updated: Sep 12, 2025, 2:20 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
6.4remediation
0.0relevance
0.5threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.