microsoft/vscode-copilot-chat

microsoft/vscode-copilot-chat

GitHubGitHub
GitHubgithub.com
code.visualstudio.comcode.visualstudio.com
Releases393
Frequency17 hours 22 minutes
Last Release
Stars9.99K
Copilot Chat extension for VS Code
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2025-66389NVD↗
—7.5 HIGH—

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.