NetSight
high8.8

CVE-2026-69320

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute cod…

Impact

Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftVisual Studio Code
before 1.132.1

Weakness classification

References