CVE-2025-64660

Copilot and VS Code access-control flaw enables code execution

Microsoft · Visual Studio Code / GitHub Copilot

First documented disclosure · Review checkpoint

Summary

Microsoft’s CVE record describes improper access control enabling code execution; IDEsaster links this issue to multi-root workspace settings.

Severity and exploitation evidence

High · 8.0/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources establish a disclosed weakness or researcher demonstration, not malicious exploitation in the wild.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Agent-influenced workspace configuration can reach underlying editor execution features.

Conditions required

An authorized attacker and user interaction, as reflected in Microsoft’s CVSS vector.

Potential impact

Code execution in the developer environment.

Affected versions and configurations

Visual Studio Code 1.0.0 to before 1.106.2.

Fix and mitigation status

Visual Studio Code 1.106.2.

Practical next steps

Update VS Code and restrict agent writes to workspace configuration and executable settings.

Operating lesson

Review automatic editor side effects as part of an AI agent’s permissions.

Evidence and limits

November 20 is the earliest public date documented in the retrieved authority record; December 6 grouped research is later. The original IDEsaster article names ten CVEs while reporting 24 assignments overall.

Related incident and research records

Related records can include laboratory demonstrations; a relationship does not itself establish exploitation.

Sources