GitHub Copilot Chat vulnerabilities

2 known vulnerabilities in GitHub Copilot Chat from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  GitHub Copilot Chat: Initialization of a Resource with an Insecure Default

  CVE-2026-50519Jun 19, 2026Microsoft

  Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

• 8.8 High severity

  Microsoft Visual Studio Code CoPilot Chat…: Improper Neutralization of Special Elements used in a Command

  CVE-2025-62222Nov 11, 2025Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.