CVE-2026-23653: GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
CVE-2026-23653 is an information disclosure vulnerability in GitHub Copilot and Visual Studio Code, rated Important by Microsoft, with a CVSS 3.1 base score of 5.7 (Medium). An attacker can exploit it remotely over the network, with low privileges and only if a user takes an action. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 0.74% probability of exploitation activity in the next 30 days, higher than 55% of all scored vulnerabilities. Microsoft released the fix on 14 April 2026 in the April 2026 Patch Tuesday. It affects 1 product in 1 product family (Developer Tools).
Key facts
- CVE ID
- CVE-2026-23653
- Severity
- Medium CVSS 5.7
- Microsoft severity
- Important
- Impact
- Information Disclosure
- Exploited in the wild
- No
- Publicly disclosed
- No
- Exploitation likelihood
- Less Likely
- Weakness
- CWE-77
- EPSS
- 0.74% (percentile 55%)
- CISA KEV
- Not listed
- Released
- Last updated
- Patch Tuesday
- April 2026 Patch Tuesday
- Product families
- Developer Tools
CVSS score and vector
Microsoft scores CVE-2026-23653 at 5.7 (temporal 5) using CVSS 3.1. Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
| Metric | Value |
|---|---|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality impact | High |
| Integrity impact | None |
| Availability impact | None |
| Exploit code maturity | Unproven |
| Remediation level | Official fix |
| Report confidence | Confirmed |
Description
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
Frequently asked questions (Microsoft)
What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could disclose the contents of the Model Context Protocol (MCP) when using Copilot.
Affected products (1)
Developer Tools
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Microsoft Visual Studio Code CoPilot Chat Extension | Release Notes | Security Update | 0.37.3 | Maybe |
NIST NVD data
- NVD status
- Analyzed
- NVD CVSS
- 5.7 (MEDIUM)
- NVD weakness
- CWE-77
- Published to NVD
- NVD last modified
Affected configurations (CPE)
| Product | Vulnerable versions |
|---|---|
| github copilot chat | before 0.37.3 |
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23653 (Vendor Advisory)
Acknowledgments
- Jose Rodrigo Sanchez Vicarte with Microsoft
Revision history
| Version | Date | Description |
|---|---|---|
| 1.0 | Information published. |