CVE-2026-65675: CoPilot Chat Security Feature Bypass Vulnerability

Overview

Severity

High (CVSS 7.1)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C

Category

Security Feature Bypass

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2026-Aug

Released

2026-08-11

Last Updated

2026-09-24

EPSS Score

0.64% (percentile: 48.5%)

Description

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

FAQ

How could an attacker exploit this vulnerability? An attacker could exploit this vulnerability by supplying specially crafted content that the AI coding agent processes, causing it to write files outside the workspace folder the user opened. Exploitation requires the user to be operating the agent in an automatic edit-approval mode. Successful exploitation could allow an attacker to create or modify files that the user did not intend the agent to change.

Affected Products (1)

Developer Tools

• Microsoft Visual Studio Code CoPilot Chat Extension

Security Updates (1)

• Release Notes

Acknowledgments

Rayhan Destian, Theodor N. Engoey

Revision History

• 2026-08-11: Information published.
• 2026-08-19: CWE added. Informational change only.
• 2026-09-02: Affected software updated with new package information.
• 2026-09-24: Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.