microsoft/vscode-copilot-chat

microsoft/vscode-copilot-chat

GitHubGitHub
GitHubgithub.com
code.visualstudio.comcode.visualstudio.com
Releases393
Frequency17 hours
Last Release
Stars9.98K
Copilot Chat extension for VS Code
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-66389↗
7.5 HIGH—

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.