GitHub Copilot for JetBrains Remote Code Execution Vulnerability

A command injection vulnerability has been identified in the GitHub Copilot plugin for JetBrains IDEs. This issue allows unauthorized attackers to execute code remotely over the network. The vulnerability arises from improper neutralization of special elements used in commands, enabling command injection attacks.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for the GitHub Copilot plugin for JetBrains IDEs from the JetBrains Plugin Repository. Instructions are available in the release notes.