Visual Studio Code Session Fixation Vulnerability Allowing Privilege Elevation

A session fixation vulnerability has been identified in Visual Studio Code, allowing unauthorized attackers to elevate privileges over a network. This vulnerability affects Visual Studio Code versions prior to 1.119.1.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege elevation, allowing an attacker to gain access to resources and perform actions associated with the compromised managed identity on the MCP Server.

Remediation

Users are advised to update to Visual Studio Code version 1.119.1 or later. The security update is available for download from the Visual Studio Code website.