Microsoft Visual Studio Code and GitHub Copilot Path Traversal Vulnerability Allowing Security Feature Bypass

A path traversal vulnerability has been identified in the GitHub Copilot and Visual Studio Code applications. This issue allows an unauthorized attacker to locally bypass a security feature by improperly limiting a pathname to a restricted directory. The vulnerability affects several different versions and ranges of Visual Studio Code, as well as the GitHub Copilot Chat Extension.

Impact

Exploitation of this vulnerability can lead to a security feature bypass, allowing for unauthorized actions or access that should be restricted.

Remediation

Users can download the security update for the Microsoft Visual Studio Code Copilot Chat Extension from the Visual Studio Code website. For detailed release notes, visit the Visual Studio Code update page.