NetSight
high8.0

CVE-2026-21523

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.

Impact

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftVisual Studio Code
before 1.109.2

Weakness classification

References