CVE-2026-58650
Received Received - Intake

Authorization Bypass in Visual Studio Code

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Microsoft Corporation

Description
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-58650
EUVD
EUVD-2026-56289

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft visual_studio_code *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization bypass in Visual Studio Code where an attacker can bypass a security feature by manipulating a user-controlled key. It allows unauthorized local access to restricted functions.

Detection Guidance

This vulnerability involves an authorization bypass through user-controlled keys in Visual Studio Code. Detection requires checking for unauthorized modifications to configuration files or extensions that could allow bypassing security features. Inspect Visual Studio Code settings and installed extensions for suspicious changes.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive features or data on your local system. This may lead to data theft, code execution, or further compromise of your development environment.

Mitigation Strategies

Apply the latest security update from Microsoft for Visual Studio Code immediately. Disable any untrusted extensions and review user-controlled key configurations. Monitor for unusual activity in Visual Studio Code processes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58650. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart