Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
How could an attacker exploit this vulnerability? An attacker could convince a user to add and start a specially crafted sandboxed MCP server alongside another sandboxed server in Visual Studio Code. Successful exploitation could allow the attacker-controlled server to write into the other server's directory, bypassing the per-server sandbox policy and potentially executing code under the other server's permissions. User interaction is required to add and start the servers. According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability? An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.
<a href="https://imap143.com/">Myungyong Lee</a>, thegoldmandm