CVE-2026-65675

Modified Modified - Updated After Analysis

Security Feature Bypass in Visual Studio Code CoPilot Chat Extension

Publication date: 2026-08-11

Last updated on: 2026-08-28

Assigner: Microsoft Corporation

Description

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-28

Generated

2026-08-31

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-65675

EUVD

EUVD-2026-56437

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	github_copilot_chat	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in the Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network without requiring any special access or conditions.

Detection Guidance

Detection requires monitoring for unauthorized bypass attempts of security features in Visual Studio Code CoPilot Chat Extension. Check extension logs for unusual network activity or feature bypass events. Inspect network traffic for unexpected connections to untrusted sources.

Impact Analysis

An attacker could exploit this to bypass security measures, potentially gaining unauthorized access to sensitive data or system functions. The impact includes high integrity compromise and limited availability disruption.

Compliance Impact

This vulnerability allows unauthorized attackers to bypass security features over a network, which could lead to unauthorized access or data exposure. Such bypasses may violate compliance requirements under GDPR (data protection) and HIPAA (health data security) by compromising confidentiality and integrity controls.

Mitigation Strategies

Update Visual Studio Code and the CoPilot Chat Extension to the latest patched version as soon as possible to address the security feature bypass.

Hi! I’m here to help you understand CVE-2026-65675. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70