CVE-2026-50519

Analyzed Analyzed - Analysis Complete

Insecure Default Resource Initialization in GitHub Copilot for VS Code

Publication date: 2026-06-19

Last updated on: 2026-06-29

Assigner: Microsoft Corporation

Description

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-19

Last Modified

2026-06-29

Generated

2026-07-11

AI Q&A

2026-06-20

EPSS Evaluated

2026-07-10

NVD

CVE-2026-50519

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	github_copilot_chat	to 1.123.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1188	The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

Attack-Flow Graph

Executive Summary

This vulnerability involves the initialization of a resource with an insecure default setting in GitHub Copilot and Visual Studio Code. Because of this insecure default, an unauthorized attacker can disclose information over a network.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information over a network. This means that attackers could potentially access confidential data without permission, which could compromise privacy and security.

Compliance Impact

The vulnerability allows an unauthorized attacker to disclose information over a network due to initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code.

Such unauthorized information disclosure could potentially impact compliance with standards and regulations like GDPR and HIPAA, which require protection of sensitive data and prevention of unauthorized access.

However, specific effects on compliance or regulatory impact are not detailed in the provided information.

Hi! I’m here to help you understand CVE-2026-50519. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70