No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
How could an attacker exploit this vulnerability? An attacker could exploit this vulnerability by supplying specially crafted content that the AI coding agent processes, causing it to write files outside the workspace folder the user opened. Exploitation requires the user to be operating the agent in an automatic edit-approval mode. Successful exploitation could allow an attacker to create or modify files that the user did not intend the agent to change.
Rayhan Destian, Theodor N. Engoey