CVE-2026-114171

An MCP installation preview could omit security-relevant details

Microsoft · Visual Studio Code MCP server installation

First documented disclosure · Review checkpoint

Summary

The preview did not accurately show the configuration the client would install. The installed server could execute code with the user's permissions.

Severity and exploitation evidence

High · 8.8/10 · CVSS 3.1. Severity source.

Exploitation not established: Microsoft marked exploitation as No at publication.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The preview did not accurately show the configuration the client would install.

Conditions required

A user followed a link and agreed to install the proposed MCP server.

Potential impact

The installed server could execute code with the user's permissions.

Affected versions and configurations

1.0.0 through versions before 1.145.3, per Microsoft.

Fix and mitigation status

1.145.3.

Practical next steps

Update VS Code and review previously accepted MCP server registrations.

Operating lesson

Track the deployed SDK, extension or managed service when applying Microsoft’s remediation.

Evidence and limits

The CVE record was published on 2026-11-10.

Sources