CVE-2026-54981

The Python extension for Visual Studio Code is vulnerable due to the inclusion of functionality from an untrusted control sphere, enabling unauthorized attackers to bypass local security features. This flaw poses a high risk as it could allow malicious actors to execute arbitrary code or manipulate the development environment. Developers and organizations utilizing this extension should prioritize patching to mitigate potential exploitation.