AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-70335

HIGH · CVSS 7.8 EPSS 0.47%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

GitHub Copilot and Visual Studio Code are vulnerable to an OS command injection flaw that permits unauthorized attackers to escalate privileges locally. This high-severity vulnerability (CVSS 7.8) poses a significant risk to users who rely on these tools for development, making it essential for organizations utilizing these products to prioritize immediate remediation efforts.

CVE
CVE-2026-70335
Severity
HIGH
CVSS
7.8
EPSS
0.47%
GitHub

Original NVD Description

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-48447 HIGH CVE-2026-48441 HIGH CVE-2026-48410 HIGH CVE-2026-48409 HIGH CVE-2026-48408 HIGH CVE-2026-48407 HIGH