High nvd · CVE-2026-70335

CVE-2026-70335: Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual

Published Aug 11, 2026 CVSS 7.8

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Remote Code Execution

Affected AI Products

github copilot copilot

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.